1/26 MiRo: A Virtual Private Network For Telehealth Services ROBERTO DI ROSA, MIRCO STURARI, MATTEO LIUTI ALDO FRANCO DRAGONI*, GIUSEPPE GIAMPIERI** *DEIT,

1/26

MiRo:MiRo:A Virtual Private Network For A Virtual Private Network For

Telehealth ServicesTelehealth Services

MiRo:MiRo:A Virtual Private Network For A Virtual Private Network For

Telehealth ServicesTelehealth Services

ROBERTO DI ROSA, MIRCO STURARI, MATTEO LIUTIALDO FRANCO DRAGONI*, GIUSEPPE GIAMPIERI**

*DEIT, Dipartimento di Elettronica Intelligenza Artificiale e Telecomunicazioni – Università Politecnica delle Marche, Ancona

**ASUR Zona 7, Azienda Sanitaria Locale delle Marche Ancona

2/26

represents the erogation of health service at distances through informatics and telecommunications technologies

TTELEMEDICINEELEMEDICINE

3/26

WWORKINGORKING C CONTEXTONTEXT

• Delocalization of health servicesDelocalization of health services

• Tele-reporting and second-opinionTele-reporting and second-opinion

• Integration of informative health systemsIntegration of informative health systems

4/26

CCURRENTURRENT S SITUATIONITUATION

Nowadays Nowadays health-systems often providesystems often provide tele-reporting services.tele-reporting services.

5/26

• Not easy-to-useNot easy-to-use

• Specific applicationsSpecific applications

• Dedicated hardwareDedicated hardware

• Dedicated connectionsDedicated connections

• Costs proportional to number of connected hosts.Costs proportional to number of connected hosts.

PPROBLEMS OF ROBLEMS OF TTRADITIONALRADITIONALTTELEMEDICINE ELEMEDICINE SSYSTEMSYSTEMS

6/26

Proposed Solution

• Doesn’t need complex dedicated hardwareDoesn’t need complex dedicated hardware

• Data-Transfer throught Internet.Data-Transfer throught Internet.

• Costs not depending on the number of installations.Costs not depending on the number of installations.

• Adaptable to any kind of diagnostic situation.Adaptable to any kind of diagnostic situation.

ASYNCRONOUS SYSTEM

7/26

Design and Development of a “a “flexibile”flexibile” architecture architecture,,

for tele-reporting and second-opinion servicesfor tele-reporting and second-opinion services..

8/26

Laboratory executes an Laboratory executes an examination that examination that produces digital dataproduces digital data

Laboratory pubblicates Laboratory pubblicates exam through the exam through the creation of an event creation of an event and sends it to the and sends it to the system (in particular to system (in particular to the broker)the broker)

Phisicians compile and Phisicians compile and sign reports and send sign reports and send them to the timestamp them to the timestamp serviceservice

Timestamp service Timestamp service appends a certificated appends a certificated datetime to the report datetime to the report and forwards it back to and forwards it back to the phisicianthe phisician

Phisician sends this Phisician sends this signed document to the signed document to the brokerbroker

Laboratory decides to Laboratory decides to terminate the terminate the refertation processrefertation process

Clinical event is sent to Clinical event is sent to the broker which shows the broker which shows it to the phisicianit to the phisician

9/26

PPROPOSEDROPOSED A ARCHITECTURERCHITECTURE

PublicPublicNetworkNetwork

10/26

DEVELOPMENT PLATFORM: DEVELOPMENT PLATFORM: Java 2 Standard EditionJava 2 Standard Edition

UUSEDSED T TECHNOLOGIESECHNOLOGIES

11/26

ARCHITECTURE: ARCHITECTURE: Service-Oriented ArchitectureService-Oriented Architecture

UUSEDSED T TECHNOLOGIESECHNOLOGIES

12/26

SERVICES: SERVICES: Web ServicesWeb Services

UUSEDSED T TECHNOLOGIESECHNOLOGIES

13/26

WEB APPLICATIONS: WEB APPLICATIONS: StrutsStruts Framework Framework

UUSEDSED T TECHNOLOGIESECHNOLOGIES

14/26

SECURITY: SECURITY: SSL CommunicationSSL Communication and and X.509 Digital CertificatesX.509 Digital Certificates

UUSEDSED T TECHNOLOGIESECHNOLOGIES

15/26

DIGITAL SIGNATURE: DIGITAL SIGNATURE: Smart CardSmart Card

UUSEDSED T TECHNOLOGIESECHNOLOGIES

RSA Key PairGenerationAliasAlias

CertificateRequest

SendingCSR to CA

SendingCSR to CA

Sending X.509To User

Sending X.509To User

Storing in theSmart Card

CertificateGeneration

CA Off-line

1024 bitSensitiveUnextractable

PKCS#10

OpenSSLX.509

16/26

DDIGITAL IGITAL SSIGNATURE AND IGNATURE AND TTIMESTAMPIMESTAMP

17/26

CCLINICAL LINICAL EEVENTVENT G GENERATIONENERATION

18/26

CCLINICAL LINICAL EEVENTVENT V VIEWIEW

19/26

EEXAM XAM VVIEWIEW

20/26

CCLINICAL LINICAL EEVENTVENT V VIEWIEW

21/26

EEXAM XAM RREPORTING EPORTING PPHASEHASE

22/26

CCLINICAL LINICAL EEVENTVENT V VIEWIEW

23/26

CCLINICAL LINICAL EEVENTVENT C COMPLETATIONOMPLETATION

24/26

• We have realized a flexible software architecture based on TCP/IP communication.

• We have developed service applications for teleconsulting and telereporting activities.

• We have assured secure data-transfer in public environment using digital certificates and timestamp.

CCONCLUSIONSONCLUSIONS

25/26

FFUTURES UTURES WWORKSORKS

• Consolidate and test the project

• Create new health services

• Use proposed system in other applications

26/26

GGREETINGSREETINGS

• ALDO FRANCO DRAGONIDEIT, Dipartimento di Elettronica Intelligenza Artificiale e Telecomunicazioni – Università Politecnica delle Marche, Ancona

• GIUSEPPE GIAMPIERIASUR Zona 7, Azienda Sanitaria Locale delle Marche Ancona

THANK FOR YOUR ATTENTION