Integration of enhanced qualified electronic signature to the fast healthcare interoperability resources (FHIR RU-core) protocol

The article discusses how to use the Russian profile of the Fast Healthcare Interoperability Resources (FHIR) RU-core protocol for medical information systems developing. An enhanced qualified electronic signature has been used for information protection for a long time; however, it is currently being implemented for the first time with the FHIR RU-core protocol to protect medical information systems. The goal of the research is enhanced qualified electronic signature integration for organizations developing secure software for medical information systems. To reach the goal, the following tasks are solved: previous works including foreign ones are analyzed and the table with different variants of FHIR protocol using is presented; the step-by-step plan of an enhanced qualified electronic signature integration has elaborated. A software code has been created to ensure the safe transmission of sensitive medical data to meet the challenge of implementing an enhanced qualified electronic signature. Russian standards were used to implement cryptographic protection of information in various medical information systems. To ensure secure data exchange, an enhanced qualified electronic signature was incorporated into the domestic version of the FHIR protocol. The use of Russian version of the protocol and certificates result in the correct exchange of medical documents. New functionality for medical information systems was standardized through the application of the Russian profile of FHIR protocol. Medical information systems deployed in the certified data processing centers are now using the FHIR RU-core protocol. The medical community easily uses FHIR RU-core, which is the most advanced tool for domestic medical systems. The method is aimed at integrating health information systems safely to develop regional services for doctors, patients, and digital health care organizers. The scientific novelty and relevance of the research lies in the field of adaptation international experience of using FHIR protocol under Russian circumstances and refinement of an enhanced qualified electronic signature integration method without capacity loss. The practical result demonstrates that the use of the Russian enhanced qualified electronic signature satisfies the information security requirements of new medical information systems and allows sensitive data to be transmitted without loss of quality and speed. It has been concluded that a systematic approach to using the Russian profile of the FHIR RU-core protocol for new medical information systems, with the aim of implementing digital healthcare, is highly recommended. This article is a valuable resource for medical information systems software architects and developers, as well as information security specialists.