Integration of enhanced qualified electronic signature to the fast healthcare interoperability resources (FHIR RU-core) protocol

The article discusses how to use the Russian profile of the Fast Healthcare Interoperability Resources (FHIR) RU-core protocol for medical information systems developing. An enhanced qualified electronic signature has been used for information protection for a long time; however, it is currently being implemented for the first time with the FHIR RU-core protocol to protect medical information systems. The goal of the research is enhanced qualified electronic signature integration for organizations developing secure software for medical information systems. To reach the goal, the following tasks are solved: previous works including foreign ones are analyzed and the table with different variants of FHIR protocol using is presented; the step-by-step plan of an enhanced qualified electronic signature integration has elaborated. A software code has been created to ensure the safe transmission of sensitive medical data to meet the challenge of implementing an enhanced qualified electronic signature. Russian standards were used to implement cryptographic protection of information in various medical information systems. To ensure secure data exchange, an enhanced qualified electronic signature was incorporated into the domestic version of the FHIR protocol. The use of Russian version of the protocol and certificates result in the correct exchange of medical documents. New functionality for medical information systems was standardized through the application of the Russian profile of FHIR protocol. Medical information systems deployed in the certified data processing centers are now using the FHIR RU-core protocol. The medical community easily uses FHIR RU-core, which is the most advanced tool for domestic medical systems. The method is aimed at integrating health information systems safely to develop regional services for doctors, patients, and digital health care organizers. The scientific novelty and relevance of the research lies in the field of adaptation international experience of using FHIR protocol under Russian circumstances and refinement of an enhanced qualified electronic signature integration method without capacity loss. The practical result demonstrates that the use of the Russian enhanced qualified electronic signature satisfies the information security requirements of new medical information systems and allows sensitive data to be transmitted without loss of quality and speed. It has been concluded that a systematic approach to using the Russian profile of the FHIR RU-core protocol for new medical information systems, with the aim of implementing digital healthcare, is highly recommended. This article is a valuable resource for medical information systems software architects and developers, as well as information security specialists.

1. Gorbunov N., Kuleshova V., Korzhuk V. Personal data processed in medical information systems. International Research Journal, 2023, no. 9 (135), pp. 10. (in Russian). https://doi.org/10.23670/IRJ.2023.135.3

2. Mikhailenko O.V., Staykov G.B., Dorrer G.A. Using the fast healthcare interoperability resources health information exchange standard in digital healthcare. ITNOU, 2021, no. 1 (17), pp. 43–49. (in Russian). https://doi.org/10.47501/ITNOU.2021.1.043-049

3. Semenov I., Kopanitsa G., Denisov D., Yakovenko A., Osenev R., Andreychuk Y. Patients decision aid system based on FHIR profiles. Journal of Medical Systems, 2018, vol. 42, no. 9, pp. 166. https://doi.org/10.1007/s10916-018-1016-4

4. Semenov I., Kopanitsa G. Decision support system based on FHIR profiles. Studies in Health Technology and Informatics, 2018, vol. 249, pp. 117–121. https://doi.org/10.3233/978-1-61499-868-6-117

5. Semenov I., Osenev R., Gerasimov S., Kopanitsa G., Denisov D., Andreychuk Y. Experience in developing an FHIR medical data management platform to provide clinical decision support. International Journal of Environmental Research and Public Health, 2019, vol. 17, no. 1, pp. 73. https://doi.org/10.3390/ijerph17010073

6. Leroux H., Metke-Jimenez A., Lawley M.J. Towards achieving semantic interoperability of clinical study data with FHIR. Journal of Biomedical Semantics, 2017, vol. 8, pp. 41. https://doi.org/10.1186/s13326-017-0148-7

7. Dolin R.H., Boxwala A., Shalaby J. A Pharmacogenomics Clinical Decision Support service based on FHIR and CDS Hooks. Methods of Information in Medicine, 2018, vol. 57 (S 02), pp. e115–e123. https://doi.org/10.1055/s-0038-1676466

8. Owens D.K. Improving practice guidelines with patient-specific recommendations. Annals of Internal Medicine, 2011, vol. 154, no. 9. pp. 638–639. https://doi.org/10.7326/0003-4819-154-9-201105030-00010

9. Weber S., Crago E.A., Sherwood P.R., Smith T. Practitioner approaches to the integration of clinical decision support system technology in critical care. The Journal of Nursing Administration, 2009, vol. 39, no. 11, pp. 465–469. https://doi.org/10.1097/NNA.0b013e3181bd5fc2

10. Gorbunov N., Kuleshova V., Korzhuk V. Organizational and law aspects of medical information systems. International Research Journal, 2024, no. 4 (142), pp. 11. https://doi.org/10.23670/IRJ.2024.142.38

11. Vaganova E.V. Hospital information systems as the object of evaluation: factors and development tendencies. Tomsk State University Journal of Economics, 2017, no. 37, pp. 113–130. (in Russian). https://doi.org/10.17223/19988648/37/9

12. Mavlyanova L.T. Protection of information on the Internet. Oriental Renaissance: Innovative, Educational, Natural and Social Sciences, 2022, vol. 2, no. 1, pp. 568–575. (in Russian)

13. Alsafwani N., Fazea Y., Alnajjar F. Strategic approaches in network communication and information security risk assessment. Information, 2024, vol. 15, no. 6, pp. 353. https://doi.org/10.3390/info15060353