The electronic health card & related issues

Corresponding entry in Aachen Campus, Bonn Computer Science, Bonn Mathematics, Bonn University.

Lecture

Michael Nüsken

Tutorial

Daniel Loebenberger

Time & Place

Tuesday, 13¹⁵-14⁰⁰, b-it 1.21 (or Rheinsaal).
Wednesday, 11¹⁵-12⁴⁵, b-it 1.21 (or bitmax).
Tutorial: Tuesday, 11⁰⁰-12³⁰, b-it 1.21 (or Rheinsaal).

First meeting: 8 April 2008.

Exam

Pre-exam meeting: 1 October 2008, 14⁰⁰, b-it 1.25.

The exam will be on 7 October 2008 in the time between 10⁰⁰ and 13⁰⁰ o'clock in b-it Rheinsaal.

There will be a post-exam meeting on [tba.] in the b-it, room [tba.]. At this occasion you can also review our ranking of your exam.

The electronic health card shall give everybody the opportunity to carry a lot of health related information with you. First, it'll contain administrative information, like your name and your health insurance company. Later, also recipies will be carried electronically using this card. In a next step, emergency information like your blood group, allergies may be stored. The ultimate goal is an electronic health folder for everybody. Clearly, such sensitive information need good protection. Only the data that the patient acknowledges will be stored and only the doctor that the patient allows shall have access to specific data. In Germany 80 million patients will have such a card in the near future, and 21'000 pharmacies, 123'000 practising physicians, 65'000 dentists, 2'200 hospitals, and all the health insurance companies will be connected in the "Telematik" infrastructure. Cryptography can play a rôle in all this. The course shall discuss social implications, data protection issues, and how all this can be protected.

Lecture notes and exercises

The lecture notes (PDF) contain all slides.

Exercise sheet 1 (PDF).
Exercise sheet 2 (PDF).
Exercise sheet 3 (PDF).
Exercise sheet 4 (PDF).
Exercise sheet 5 (PDF).
Exercise sheet 6 (PDF).
Exercise sheet 7 (PDF).
Exercise sheet 8 (PDF).
Exercise sheet 9 (PDF).
Exercise sheet 10 (PDF).
Exercise sheet 11 (PDF).

Material

Many links refer to the German health card infrastructure and thus are mostly in German.

Bundesministerium für Gesundheit (2008). Website Die Gesundheitskarte.
Gesellschaft für Telematikanwendungen der Gesundheitskarte mbH (gematik). Website.
D-Trust. gematik root certificates.
Bundesamt für Sicherheit in der Informationstechnik BSI (2004). Notfallvorsorge-Konzept. [This is part of the basic IT-protection guidelines of the BSI (IT-Grundschutz). An example can be found in Musterrichtlinien und Beispielkonzepten.]
Bundesamt für Sicherheit in der Informationstechnik BSI (2007, v1.0). Technische Richtlinie für die eCard-Projekte der Bundesregierung (BSI TR-03116).
Bundesamt für Sicherheit in der Informationstechnik BSI (2007, v1.0). Elliptische-Kurven-Kryptographie (ECC), TR-03111.
ECC Brainpool (2005). ECC Brainpool Standard Curves and Curve Generation.
Hash function lounge.

Additional topics (2 credit upgrades)

Andreas Gasper. ECC: theory and suggested parameter sets.
Sinan Mece. The German electronic health card: Physical parameters and requirements.
Richard Tantius. The German electronic health card: Interface description of the card.
-. Contingency plan: About a special aspect of availability.

Prerequisites

None.

Allocation

3+2 SWS, 6 credits.

Media Informatics: Computer and Communication Technology.
Recommendation for University of Bonn - Computer Science: A or A1, respectively.