DE102006057201A1 - Smart card for mobile telecommunication device for use as electronic patient card, has code and pointer and code is provided for encoding of another code, which is transmitted by doctor information system - Google Patents

Abstract

The smart card has a code and a pointer. The code is provided for encoding of another code. The latter code is transmitted by a doctor information system. Another pointer is transmitted by a former server. The latter pointer is designed for identification of a memory area of a former server. The memory area of the former server is provided for receiving patient data. The patient data is encoded with the latter code. Independent claims are also included for the following: (1) a method for storage of data (2) a method for the inquiry of data stored on a former server (3) a computer program product, particularly digital storage medium.

Description

The The invention relates to a smart card for a mobile telecommunication device for use as electronic patient card, a mobile telecommunication device with a Storage area for use as an electronic patient card, a method for storing and retrieving data, and the like Computer program products.

So-called smart cards are known from the prior art. An overview of previously known chip cards "Handbook of Chip Cards", Wolfgang Rankl, Wolfgang Effing, Carl Hanser Verlag, 1999 ,

smart cards are used in the medical field as so-called patient cards used. Due to the small storage capacity of smart cards is initially only for use as an electronic patient card the storage of less administrative data such as date of birth, Health insurance, address, etc. provided. Data, which contains information for emergency care and documentation of ingested Drugs are for storage on a central data server intended. This includes, for example, the electronic doctor's letter and the electronic medical record.

DE 10 2004 051 296 B3 describes a method for storing data and for retrieving data, as well as corresponding computer program products. A personalized chip card enables the storage of a virtual patient record on a data server. Using the smart card, data, such as a patient record, can be encrypted and transferred to the data server by a medical office practice computer system. Another application of smartcards for patient data is off DE 102 58 769 A1 known.

Of the Invention is in contrast The task is based on an improved method for storage and retrieval of patient data, and corresponding computer program products to accomplish.

According to the invention is a Chip card for created a mobile telecommunications device, wherein the smart card for the Mobile communication and for use as an electronic patient card is trained. This has the advantage that the patient does not have a separate, required as electronic patient card chip card, but the electronic patient card is already integrated in his mobile phone.

To an embodiment the invention, the smart card has a first key and a first pointer, where the first key is for encryption a second key and a second pointer, and wherein the second key via a Doctor information system transmitted becomes and the second pointer over transmitted a first server becomes. The second pointer is for identifying a memory area a first server formed and the memory area of the first Servers are intended to contain patient data. There are the patient data is encrypted with the second key. Of the first pointer is to store the encrypted with the first key second key and the one with the first key encrypted second pointer in a position identified by the first pointer Memory area of a second server provided.

To an embodiment of the invention are the first key and the first pointer as an address book entry stored on the chip card of the mobile telecommunication device. This has the advantage that even older ones Chip cards, which are special memory area for use as an electronic patient card, can store data to the mobile telecommunication device to use as an electronic patient card.

To an embodiment The invention stores patient data on the chip card. These Patient data are duplicates of patient data stored on the first server are stored, whereby the chip card as cache (cache) the first server for the patient data is formed. The patient data stored on the chip card can e.g. Emergency data such as blood type, list of medications taken, next member etc. include which read out of the mobile telecommunication device in an emergency can be. Likewise the patient data e.g. include electronic prescriptions that can be read in a pharmacy. Depending on the memory size of the chip card can also more space consuming Patient data to be cached on the chip card. Thereby There is the advantage that information about the mobile telecommunication device immediately available are, without an elaborate Producing a telecommunication connection with a central Server is necessary. Likewise, on the chip card a duplicate be stored by at least one second pointer, whereby the Memory area as cache (cache) of the second server for the corresponding second pointer is formed. This is eliminated Query patient data on the first server in one are stored memory area identified by this second pointer, the establishment of a communication connection with the second server.

According to one embodiment of the invention the smart card has means for encrypting the second key and the second pointer with the first key. Since the first key can not be read from the chip card and all encryption processes take place in the chip card, high data security is ensured and the probability of unauthorized spying on data is minimized.

To an embodiment invention, the smart card is personalized. For example, at Assigning the chip card a unique first key and a unique first pointer is stored on the smart card, which are uniquely associated with the patient with the smart card.

In In another aspect, the invention relates to the use of a for the mobile telecommunication provided smart card as an electronic patient card. This has the advantage that previously common, located in mobile telecommunications equipment Smart cards, can be used as electronic patient card.

In In another aspect, the invention relates to a mobile telecommunications device having a first Interface for a mobile communication network and having at least one memory area, wherein the storage area for use as an electronic patient card is trained. The use of a storage area of a mobile telecommunications equipment as an electronic patient card has the advantage that an electronic patient card Patient card, which is designed as a separate chip card, no longer needed becomes. As storage areas in mobile telecommunications equipment extensive can be dimensioned exists in addition the possibility of over the typically used data of the electronic patient card to store outgoing data volumes on the mobile telecommunication device.

To an embodiment According to the invention, the memory area has a first key and a first pointer, where the first key is for encryption a second key and a second pointer is provided, wherein the second key via a Doctor information system transmitted becomes and the second pointer over transmitted a first server becomes. The second pointer is for identifying a memory area a first server, wherein the memory area of the first Server is provided for receiving patient data and wherein the patient data is encrypted with the second key. The first pointer is for storing the one encrypted with the first key second key and the one with the first key encrypted second pointer in a position identified by the first pointer Memory area of a second server provided.

To an embodiment of the invention are the first key and the first pointer as an address book entry stored in the memory area. This allows the use of popular mobile telecommunications equipment as electronic patient card.

To an embodiment The invention relates to the memory area for receiving chip card applications provided, wherein at least one of the smart card applications for encrypting the second key and the second pointer is provided with the first key. this has Again, the advantage that the first key never leave the mobile telecommunications device must and all Encryption operations in the mobile telecommunication device occur. This will be a misuse and unauthorized access Prevented patient data.

To an embodiment According to the invention, patient data are stored in the memory area. These patient data are duplicates of patient data which are on the first server are stored, reducing the memory area as a cache of the first server for the patient data is trained. The patient data stored in the memory area can e.g. Emergency data such as blood type, list of medications taken, next member etc. include which read out of the mobile telecommunication device in an emergency can be. Likewise the patient data e.g. include electronic prescriptions that can be read in a pharmacy. Depending on the memory size of the memory area can also more space consuming Patient data is cached in the memory area. This gives the advantage that information about the mobile telecommunication device immediately available are, without an elaborate Producing a telecommunication connection with a central Server is necessary. Likewise, in the memory area a duplicate be stored by at least one second pointer, whereby the Memory area as cache (cache) of the second server for the corresponding second pointer is formed. This eliminates when querying patient data, which on the first server in a through this second pointer storage area are stored, the structure of a Communication connection with the second server.

In a further aspect, the invention relates to a method for storing data. After establishing a secure communication channel to a mobile telecommunications device that takes place Reading a first key and a first pointer from the mobile telecommunication device. Preferably, end-to-end encryption is used for communication. After encrypting the patient data with a second key, the encrypted data is sent to a first server from which a second pointer is received in response to the encrypted data. The second pointer identifies the storage area of the encrypted data on the first server. The second key and the second pointer are encrypted with the first key, and the second key encrypted with the first key and the second pointer encrypted with the first key are sent to a second server for storage in a memory area of the memory area identified by the first pointer second server. This has the advantage that the storage of large amounts of data is made possible by means of a chip card, at the same time the data can be protected against manipulation and / or spying.

To an embodiment The invention will be additional to the encrypted second key and the encrypted second pointer meta-information regarding the data in the by the first pointer identified storage area stored. These Meta information can descriptive information on the individual entries in the electronic Include patient record, so not always the full amount of data but a selection must be made can.

To an embodiment According to the invention, the patient data are obtained by means of a medical equipment detected.

In In another aspect, the invention relates to a method for interrogation Patient data stored on a first server.

To an embodiment The invention is the construction of the secure communication channel to the mobile telecommunication device using a third Server. The third server is for individual mediation of communication links from a medical information system the mobile telecommunication device of a patient or the Construction of a telecommunication channel of a mobile telecommunication device of a Patient to the doctor information system of a desired doctor.

To an embodiment the invention, the construction of the secure communication channel via a Push service or over a pull service. The push service is required, if the construction of the communication channel from the doctor information system out. The pull service, on the other hand, is needed if the secure communication channel built by the patient from its mobile telecommunication device to the doctor information system becomes.

in the Other preferred embodiments the invention with reference to the drawings explained in more detail. It demonstrate:

1 1 is a block diagram of a data processing system for storing and retrieving patient data using an electronic patient card integrated in a mobile telecommunication device;

2 a flow chart of another preferred embodiment of a method for storing data according to the invention,

3 a flow chart of a preferred embodiment of the invention for retrieving the data,

4 a block diagram of a development of the embodiment of the 1 .

5 a flowchart of a representation of a communication between a mobile telecommunication device of a patient and a doctor information system.

The 1 shows a block diagram of a data processing system 100 for storage and retrieval of patient data 112 using a mobile telecommunication device 138 integrated electronic patient card. The data processing system 100 has a computer 102 on, for example, a doctor information system, over a network 104 with a data server 106 and a directory server 108 is connectable. At the network 104 It is a wired or wireless telecommunications network such as a computer network, a Virtual Private Network (VPN), an intranet, an extranet or the Internet.

The computer 102 has a memory 110 , such as a memory, for storing patient data 112 , The patient data may include, for example, diagnostic image data, prescription data, medical reports, and so on. This patient data 112 For example, from a treating doctor in the computer 102 be entered.

Alternatively or additionally, the computer 102 networked with a practice computer system of the doctor's office and receives automatically over the network the patient data 112 , It is thus possible, for example, for the patient data to be recorded with the aid of a medical device. It is also possible that the computer 102 for example, is integrated into a medical device, or is connected directly to such a device.

The computer 102 has at least one processor 114 to run a program 116 , as well as a component 118 for storing and / or generating a data key. Furthermore, the computer has 102 via interfaces 120 which communicate with the network 104 and the mobile telecommunication device 138 serve. Communication with the mobile telecommunication device 138 takes place directly via a wireless or a wired interface or indirectly via the network 104 via a mediation server 121 , The mobile telecommunication device 138 has an interface 140 on. This is for indirect communication with the computer 102 over the mediation server 121 , in which case the connection from the mobile telecommunication device 138 to the mediation server 121 via a cellular mobile radio network, preferably a GSM, GPRS or UMTS network. Alternatively, communication takes place via the interface 142 directly to the computer 102 via a wireless or wired connection, preferably via a Bluetooth connection, an infrared connection, a USB or an RS232 connection.

The establishment of a communication link between the computer 102 and the mobile telecommunication device 138 over the interface 140 is the entwe the computer 102 or the mobile telecommunication device 138 initiated from. If the initiation is from the computer 102 from, takes place in a first step, a structure of a communication channel from the computer 102 to the mediation server 121 , For example, the mediation server assigns to the patient's name "abc" the associated telephone number "0123-456 789" of the patient's mobile telecommunication system and then establishes a corresponding telecommunication connection to that mobile telecommunication system via which data is transferred between the computer 102 and the mobile telecommunication device 138 be replaced. If, on the other hand, the initiation of the communication connection takes place starting from the mobile telecommunication device 138 , So first, the establishment of a telecommunications connection from the mobile telecommunications device 138 to the mediation server 121 , The patient eg gives to the mediation server 121 the name of the attending physician "def." The Mediation Server 121 then assigns this doctor "def" an associated IP address "1234556789" of his computer 102 too and builds over the network 104 a communication connection to this computer 102 on what data is between the computer 102 and the mobile telecommunication device 138 be replaced.

In a store 124 of the mobile telecommunication device 138 is an index key 126 and an index pointer 128 saved. The index pointer 128 identifies an entry address 130 of the directory server 108 and thus a memory area corresponding to the memory 124 of the mobile telecommunication device 138 is assigned. The index pointer 128 is assigned once upon registration of the patient and then in the memory 124 saved. The same applies to the index key 126 which also generated when registering the patient and in the memory 124 is stored. The index key 126 is used to encrypt index entries on the directory server 108 ,

The storage of the index key 126 and the index pointer 128 in the store 124 of the mobile telecommunication device 138 This can be done, for example, by a transmission via one of the interfaces 140 and 142 of the mobile tele communication device 138 carried out, ie via the cellular mobile network or via the wireless or wired interface. Equally possible is the index key 126 and the index pointer 128 manually as an address book entry in the memory 124 of the mobile telecommunication device 138 save. It is also possible by the appropriate means the index key 126 and the index pointer 128 for example, on the SIM card of the mobile telecommunication device 138 save. This can also include the assignment of a personalized chip card, in particular a SIM card.

The memory 124 in the mobile telecommunication device 138 allows the storage of a virtual patient record on the data server 106 or an index on the electronic health record in the directory server 108 , wherein on the electronic patient record both storing and reading only with the smart card 124 of the mobile telecommunication device 138 can be accessed.

For storing the patient data 112 For example, the procedure is as follows: In a first step, a secure communication channel is established between the doctor information system 102 and the mobile telecommunication device 138 , This can be done either via a direct wireless or wired connection, such as a Bluetooth connection, or indirectly via the mobile communication network using the mediation server 121 , Preferably, the secure communication is an end-to-end encrypted connection, for example via SSL or TLS. The authentication can be done for example via a C2C authentication (card-to-card authentication). The computer 102 reads the index key 126 and the index pointer 128 from the store 124 of the mobile telecommunication device 138 , Further, a data key from the component 118 accessed. Preferably, the component generates 118 a new data key for each poll.

With the help of the data key, the patient data 112 encrypted and from the computer 102 over the interface 120 and the network 104 to the data server 106 transfer. The data server 106 stores the encrypted data in a free memory area by an entry address 132 is identified. The storage of the encrypted patient data preferably takes place 112 on the data server 106 such that the data received from the data server is stacked one after the other. The storage of data on the data server 106 So it is done unsorted and unstructured in the order of the incoming data.

Nevertheless, to allow later access to the data, the data server responds 106 to the encrypted patient data received from him 112 with the data pointer 134 for example, the entry address 132 indicates the space on the data server 106 on which the encrypted patient data 112 are stored to identify.

The data pointer 134 and that of the component 118 supplied data key with which the patient data 112 are then encrypted with the index key 126 encrypted. The encrypted data key and the encrypted data pointer are then indexed 136 from the computer 102 via its interface 120 and the network 104 to the directory server 108 transfer. The appropriate memory requirement of the computer 102 to the directory server 108 for storing the index entry 136 includes the index pointer 128 as a parameter. This preserves the directory server 108 an input about which memory area the index entry 136 is to be stored, ie in the example case considered here in the memory area with the entry address 130 passing through the index pointer 128 is identified.

The result is therefore the encrypted patient data 112 on the data server 106 saved and the index entries 136 that contain the information required to access the data on the directory server 108 , Access to the in the data server 106 stored patient data 112 , as well as the index entry 136 of the directory server 108 , is possible only with the help of the patient card, which as a memory 124 in the mobile telecommunication device 138 the patient is implemented.

Alternatively to the transfer of the index key 126 and the index pointer 128 to the computer 102 it is also possible to use the data pointer 134 and that of the component 118 supplied data key to the mobile telecommunication device 138 to transfer to there the data pointer 134 and that of the component 128 supplied data key with the index key 126 to encrypt. The encryption can be done in the mobile telecommunication device via its processor 144 carried out, which executes a corresponding smart card application, which in the memory 124 is stored. Alternatively, the encryption can be done by a processor of a smart card, for example, the SIM card of the mobile telecommunications device 138 , Is the index key 126 stored on the SIM card, this has the advantage of increased security, since the index key 126 never have to leave the SIM card. Is an encryption by the processor 144 , For example, corresponding required smart card applications for encryption via one of the interfaces 140 or 142 be loaded on the mobile telecommunication device. The smart card applications may also be used for the purpose of authorizing access to the index key 126 and the index pointer 128 serve.

At a later time, the data of the patient record, for example, from another computer 102 To retrieve another treating doctor of a hospital or other medical device, this is done as follows: After establishing a secure communication channel between the mobile phone 138 and the computer 102 be through the program 116 the index key 126 and the index pointer 128 read from the chip card. The program 116 then generates a request to the directory server 108 for retrieving the index entries of the patient file in the index pointer 128 Identified space of the directory server 108 are stored. The program uses this 116 the index pointer read from the smart card 128 ,

The directory server 108 delivers in response to that from the computer 102 received the index entries in the patient file that came with the request of the computer 102 specified memory area are stored to the computer 102 , The program 116 then decrypts the index entry (s) 136 with the index key 126 , This preserves the program 116 the data key and the data pointer 134 from the index entry 136 in plain text.

With the data pointer 134 attack the program 116 then over the interface 120 and the network 104 on the data server 106 to. The data server 106 then returns the in the, through the data pointer 134 identified storage area stored encrypted patient data 112 to the computer 102 over the network 104 back. The program 116 then decrypts the encrypted patient data 112 with the data key from the index entry 136 , The decrypted patient data 112 be from the program 116 in the store 110 stored and displayed for example on a screen.

Alternatively, it is possible again here, instead of the index key 126 from the store 124 of the mobile telecommunication device 138 read out and to the computer 102 to transfer there to the index entries 136 with the index key 126 to decrypt the decryption process by the processor 144 of the mobile telecommunication device 138 or by a microprocessor, which in the executed as a SIM card memory 124 is integrable. The index key 126 does not have to leave the store 124 be read out, reducing the index key 126 protected against misuse.

Preferably, in addition to the encrypted portion of the index entry 136 unencrypted meta information about the index entry 136 saved. For example, the metainformation indicates which category of patient information 112 the index entry 136 points. For example, the metainformation indicates an index entry 136 whether it is dental, urological or specialist data. Furthermore, the meta-information can indicate whether it is, for example, recipe data, diagnostic data or image data.

The meta-information allows it to download the encrypted data from the data server 106 to make a selection of the interested data. For example, in a dental office, typically only the index entries would be 136 , which as metainformation have the indication "dental data", for downloading from the data server 106 selected.

Furthermore, access rights to or to an index entry can also be used 136 get saved. The storage of access authorizations preferably takes place in the encrypted part of the index entry 136 ,

The 2 shows a flowchart of another embodiment of a method for storing data according to the invention. In the step 200 the patient data is either entered into the physician information system or generated in the physician information system. In the step 202 the data key is encrypted in the step 200 queried or generated patient data generated or entered. Preferably, the data key is a symmetric key. However, it can also be an asymmetric key pair. In the step 204 the patient data is encrypted with the data key. In the event that an asymmetric encryption method is used, the encryption of the data is done with the public key of the asymmetric key pair.

In the step 206 the encrypted data is sent to the data server. The doctor information system then receives a data pointer from the data server that identifies the memory area in which the patient data has been stored on the data server (step 208 ). In step 209 the establishment of a secure communication channel between the doctor information system and the mobile telecommunication device of the patient, in which the electronic patient card is integrated. In the step 210 An index key and an index pointer are read from the memory of the mobile telecommunication device and transmitted to the doctor information system. The index key is preferably a symmetric key. However, it may also be a key pair of an asymmetric encryption method. In the step 212 the encryption of the data key and the data pointer is done with the index key. If an asymmetric encryption method is used, the encryption is done with the public key of the key pair.

Encrypting the data key and data pointer generates an index entry. The index entry is sent to an index server to store the index entry in a memory area of the index server identified by the index pointer. In the step 216 the index entry is stored on the index server.

The 3 shows a flowchart of a preferred embodiment of the invention for retrieval of patient data. In step 300 a structure of a secure communication channel between a doctor information system and the mobile telecommunication device of the patient. In the step 301 The doctor information system then reads at least the index pointer or both the index pointer and the index key from the memory of the mobile telecommunication device. In the step 302 The doctor information system queries the index entry (s) stored on the directory server for that patient using the index pointer. In the step 304 the decryption of the index entry (s) is performed using the index key. Depending on the embodiment, this decryption takes place either in the mobile telecommunication device or by the physician information system.

Through the decryption, the physician information system receives the data key and the data pointer to the encrypted data stored on the data server to which the index entry refers. These patient data are retrieved using the data pointer in the step 306 queried from the data server. The medical information system then receives the encrypted patient data from the data server. These are decrypted using the data key (step 308 ) and in the step 310 For example, issued on a screen of the doctor information system.

The 4 shows a block diagram of a development of the embodiment of the 1 , In the embodiment of the data processing system 400 of the 4 Two different types of patient data implemented in a mobile telecommunication system can be used:
The memory 424 in the mobile telecommunication system 438 has a relatively small storage capacity, which is used to store the index key 426 and the index pointer 428 sufficient. On the other hand, the memory has 424 ' of the mobile phone 438 ' another patient has a larger memory area, which allows both the index key 426 ' , the index pointer 428 ' and the index entry 436 or multiple index entries of the electronic patient record in the memory 424 ' save. The memory also makes it possible 424 ' of the mobile phone 438 ' , additional patient data in the memory 424 ' save. For example, the storage of index entries and / or patient data takes place in the memory 424 ' until the storage space 424 ' is exhausted. The memory 424 ' serves as a cache to allow faster access to eg frequently used data. The index entries and patient data in memory 424 ' are duplicates of index entries or patient data, which are stored on the directory server 108 or the data server 106 are stored.

In the embodiment considered here, the user of the doctor information system also has 402 that is, for example, the attending physician, a smart card 450 with a memory 425 , The memory 425 serves to store a secret key 448 to which a public key 446 belongs. The public key 446 is for example on a logon server 444 saved. The login server 444 provides a so-called directory for the retrieval of public keys of the registered users, as well as other services for the authentication of registered users and registered patients or smart cards.

In addition, the memory can 424 . 424 ' and or 425 protected by a PIN or a biometric feature. The access protection by means of a PIN is carried out in the case of the patient via the keyboard of the mobile telecommunication device 438 respectively. 438 ' , In the case of a chip card 450 the attending physician, the access is secured by means of a PIN, which can be entered via a so-called PIN pad, which to the doctor information system 402 connected.

During operation of the data processing system 400 First, a setup of a secure communication connection between the doctor information system 402 and the mobile telecommunication device 438 respectively. 438 ' of the patient. The program 116 then tries to make appropriate index entries 436 from the store 424 respectively. 424 ' read. Since it is at the memory 424 is a memory with low storage capacity, the access attempt attempts to index entry 436 fail because these are not in the memory 424 of the mobile telecommunication device 438 is stored. In this case, the program attacks 116 to the directory server 108 to, to the index entry 436 to read. As an alternative to reading index entries 436 can the doctor information system 402 also try directly to patient data from the mobile telecommunication device 438 respectively. 438 ' to read the patient. However, this reading attempt fails in the case of memory 424 fail because it is at the memory 424 is a memory with a small storage capacity and corresponding patient data is not in the memory 424 of the mobile telecommunication device 438 are cached.

In the case of the patient with the mobile telecommunication device 438 ' which has a larger storage space 424 ' the program can 116 the index entry (s) 436 directly from the store 424 ' read. Are in the larger space 424 ' of the mobile telecommunication device 438 ' The program can also store corresponding patient data 116 this patient data also directly from the memory 424 ' of the mobile telecommunication device 438 ' read.

The in the memory area 424 ' stored index entries 436 can preferably the encrypted parts of the index entry 436 include. Likewise, they are in the memory area 424 ' stored patient data preferably in encrypted form. Preferably, in the embodiment of the 4 the patient data 112 before uploading to the data server 106 and / or the index entry 436 before uploading to the directory server 108 digitally signed by the user of the computer, ie, for example, the attending physician. This is done using the on the smart card 450 the secret key stored by the doctor. In this case, those from the data server 106 data loaded at a later time and / or the index entries loaded from the directory server 436 with the help of the on the logon server 444 stored public key 446 Verified.

The 5 FIG. 12 is a flowchart illustrating a representation of communication between a patient's mobile telecommunications device and a physician information system. FIG. In step 500 the type of connection with which the mobile telecommunication device contacts the doctor information system is determined. There are three options for this. On the one hand, it is the establishment of a telecommunication connection, starting from the mobile telecommunication device of the patient to the doctor information system. Second, it is a direct wireless or wired connection between the patient's mobile telecommunications device and the medical information system, wherein the connection is preferably established via Bluetooth or infrared. In this case, this connection can be initiated either by the mobile telecommunication device, as well as the doctor information system. As a third possibility, a telecommunication connection is set up from the doctor information system to the mobile telecommunication device of the patient.

In the event that a telecommunication connection from the mobile telecommunication device of the patient to the doctor information system is established via a mobile radio connection, takes place in step 501 First, a structure of a communication channel from the mobile telecommunication device to a mediation server. The mediation server assigns, for example, a medical ID specified by the patient to an IP address under which the medical information system is coupled to the Internet and thus to the mediation server (step 503 ). The data exchange in this case takes place via a pull service in step 505 ie the data transmission is initiated by the mobile telecommunication device.

In the event that the doctor information system establishes a telecommunication connection to the mobile telecommunication device, it is done first in step 502 a structure of a communication channel to the mediation server. The Mediation Server will then step in 504 a telecommunication connection to the mobile telecommunication device of the patient, for example, via a telephone number assigned to the patient name. The data transfer is in step 506 initiated via a push service.

In the case of, for example, a direct Bluetooth connection between the doctor information system and the mobile telecommunication device takes place in step 507 the establishment of a Bluetooth communication channel between the mobile telecommunication device and the doctor information system. In step 508 a push service is initiated.

Following on either the pull service 505 or the push services 506 and 508 takes place in step 510 eg the attempt to read an index entry from the memory of the mobile telecommunication device. If the read attempt succeeds (step 512 ), are in the step 516 requested or decrypted the patient data from the data server using the data pointer or the data key from the Indexeinra tion. On the other hand, if the reading attempt was unsuccessful, then in the step 514 First, the index server was accessed to read the index entries.

100

Data processing system

102

Physician Information System

104

network

106

data server

108

directory server

110

Storage

112

patient information

114

processor

116

program

118

key data

120

interface

121

mediation server

124

Storage

126

key Index

128

Index pointer

130

entry address

132

entry address

134

data pointer

136

index entry

138

mobile telecommunications equipment

140

interface

142

interface

144

processor

400

Data processing system

402

Physician Information System

424

Storage

425

Storage

426

key Index

428

Index pointer

436

index entry

444

login server

446

public key

448

secret key

450

smart card

Claims (26)

Chip card for a mobile telecommunication device, wherein the chip card is designed for mobile communication, characterized in that the chip card is designed for use as an electronic patient card. Chip card according to claim 1, wherein the chip card has a first key and a first pointer, wherein - the first key to encoding a second key and a second pointer, the second key being conveyed via a physician information system becomes and the second pointer over a first server is transmitted, wherein the second pointer identifies a memory area a first server is formed, wherein the memory area the first server is provided for receiving patient data, wherein the patient data is encrypted with the second key, - the first Pointer for storing the key encrypted with the first key second key and the one with the first key encrypted second Pointer in a memory area identified by the first pointer a second server is provided. The smart card according to claim 1, wherein the first key and the first pointer is stored as an address book entry on the chip card are. Chip card according to one of the preceding claims, wherein on the chip card patient data are cached. Chip card according to one of the preceding claims, wherein on the chip card at least a second pointer is cached. Chip card according to one of the preceding claims, wherein the smart card means of encryption the second key and the second pointer with the first key. Chip card according to one of the preceding claims, wherein the chip card is personalized. Use one for mobile telecommunications provided chip card as an electronic patient card. Mobile telecommunication device with a first interface for a Mobile communication network and with at least one memory area, thereby characterized in that the storage area for use as electronic Patient card is formed. A mobile telecommunications device according to claim 9, wherein said Memory area a first key and a first pointer having, - of the first key for encryption a second key and a second pointer, the second key being conveyed via a physician information system becomes and the second pointer over a first server is transmitted, wherein the second pointer identifies a memory area a first server is formed, wherein the memory area the first server is provided for receiving patient data, wherein the patient data is encrypted with the second key, - the first Pointer for storing the key encrypted with the first key second key and the one with the first key encrypted second Pointer in a memory area identified by the first pointer a second server is provided. A mobile telecommunications device according to claim 10, wherein the first key and the first pointer as an address book entry in the storage area are stored. A mobile telecommunications device according to claim 10, wherein the Memory area provided for receiving smart card applications wherein at least one of the smart card applications is for encryption the second key and the second pointer is provided with the first key. Mobile telecommunication device according to one of the preceding claims, wherein in the memory area patient data are cached. Mobile telecommunication device according to one of the preceding claims, wherein in the memory area at least a second pointer is cached. A method for storing data, comprising the steps of: establishing a secure communication channel to a mobile telecommunication device, preferably via end-to-end encryption, reading a first key and a first pointer from the mobile telecommunication device, encrypting data with a second key, sending the data encrypted with the second key to a first server, Receiving a second pointer from the first server in response to the encrypted data, Encrypting the second key and the second pointer with the first key, Sending the second key encrypted with the first key and the second pointer encrypted with the first key a second server for storage in a memory area of the second server identified by the first pointer. The method of claim 15, wherein in addition to the encrypted second key and the encrypted second pointer meta-information regarding the data in the memory area identified by the first pointer. The method of claim 15 or 16, wherein the data with the help of a medical-technical Device detected become. Procedure for polling on a first server stored data with the following steps: - Construction a secure communication channel to a mobile telecommunication device, preferably via a End-to-end encryption, - Read a first key and a first pointer from the mobile telecommunication device, - query one with the first key encrypted second key and one with the first key encrypted second pointer from an identified by the first pointer Storage area of a second server, - Decryption of the second key and the second pointer with the first key, - Query the encrypted on the first server stored data from one through the second pointer identified storage area of the first server, - Decryption the encrypted Data with the second key. The method of claim 15 or 18, wherein the structure the secure communication channel to the mobile telecommunication device Use of a third server. The method of claim 19, wherein the structure of the secure communication channel via a push service is done. The method of claim 19, wherein the structure of the secure communication channel via a pull service is done. Computer program product, in particular digital Storage medium with computer-executable instructions for performing the following steps: - Construction a secure communication channel to a mobile telecommunication device, preferably via a End-to-end encryption, - Read a first key and a first pointer from the mobile telecommunication device, - Shipment the one with the second key encrypted Data to a first server, - Receipt of a second pointer from the first server in response to the encrypted Dates, - Encryption the second key and the second pointer with the first key, - shipping the one with the first key encrypted second key and the one with the first key encrypted second pointer to a second server for storage in one memory area of the second identified by the first pointer Server. Computer program product, in particular digital Storage medium with computer-executable instructions for performing the Following steps to query for stored on a first server Dates: - Construction a secure communication channel to a mobile telecommunication device, preferably via a End-to-end encryption, - Read a first key and a first pointer from the mobile telecommunication device, - query one with the first key encrypted second key and one with the first key encrypted second pointer from an identified by the first pointer Storage area of a second server, - Decryption of the second key and the second pointer with the first key, - Query the encrypted on the first server stored data from one through the second pointer identified storage area of the first server, - Decryption the encrypted Data with the second key. Computer program product according to claim 22 or 23, the construction of the secure communication channel to the mobile telecommunications equipment done using a third server. The computer program product of claim 24 wherein the Establishment of the secure communication channel via a push service. The computer program product of claim 24, wherein the establishment of the secure communication channel takes place via a pull service.