Personal tools

A Multi-Application Medical Smart Card

by Robert Steigerwald, Independent Health Care Consultant last modified Apr 28, 2008 03:12 AM

A Multi-Application Medical Smart Card

A Multi-Application Medical Smart Card would serve as a complete and portable medical record file for consumers and a real time tool for clinicians, hospitals, health plans and researchers to better manage patients, data and outcomes.

What is a Medical Smart Card?
Similar to a credit card, a medical smart card has a microchip embedded in the plastic. This microchip can have 32, 64 or more kilobytes, allowing the smart card to store large amounts of data securely and accurately. This data can only be retrieved by using a Personal Identification Number (PIN). At the point of care, the data stored on the card can be downloaded and updated on a computer or a Palm device that has a UBS port to insure that the most accurate and up-to-data medical information is being used. The cards would have a built-in privacy shields and tiered access so that, for example, a pharmacist can read prescriptions but not medical records.

A network-linked smart card has the benefit of allowing better communication among doctors, hospitals, pharmacists, health plans and the entire care network. Improved communication at the point of care can succeed in delivering the most up-to-date medical records to improve medical decisions, review quality of care and convey feedback of best practices. A medical smart card can also play a major role in fraud reduction, improved patient tracking and disease prevention programs, improved tele-health, remote monitoring and controlling the pen-and-paper medical records drowning our health care system. A medical smart card would be in full compliance with the electronic data exchange and privacy mandates of HIPPA.

Smart Card Industry Now
In Europe, smart card technology is a $2.5 to $3 billion industry. France has developed an intricate smart card program, whereas Germany uses a very inexpensive 256-byte memory smart card. All 80 million German citizens carry a medical smart card. In Asia, smart cards have had extraordinary success in the financial arena. Recently, companies in Asia have been focusing their efforts on incorporating smart card technology into other product lines (PDAs and cell phones). With a smart chip embedded in a cell phone, consumers can store credit cards, address books, medical information and even Word® files. It is believed that within the next few years there will be very little need to even carry a wallet in Asia.

In the US, the medical smart card industry is still mostly in the talking and trial phase. Big companies like IBM and GE only discuss the potential of these cards and some smaller institutions, such as the University of Pittsburgh Medical Center, have piloted medical smart card projects, producing favorable results.

A secure medical smart card managed by the patient and the care network can help to:

- Reduce the $100 billion in health care fraud Americans are faced with each year.
- Reduce the $1.6 trillion spend on duplicative medical testing. Last year one out of every five lab tests and x-rays were conducted because previous tests were unavailable.

- Improve medical record storage, maintenance and access. The storage, maintenance and access of pen-and-paper records can consume more than 40% of a health care institution’s budget and 25% of the health care provider’s time.

- Improve patient compliance. Electronic driven reminders can be sent to the patient and the care network regarding outpatient preventative care, raising compliance from 29% to 49%. Red flags will be raised if a patient doesn’t renew his/her medication within a certain window, and patients can receive computer-generated reminders for yearly tests (PAP smear, EKG, etc)

- Reduce errors involving prescription medications. Currently these errors are responsible for up to 7,000 American deaths per year and the financial costs of drug-related morbidity and mortality costs nearly $77 billion a year.

- Keeping records up to date. Medical information on smart cards can be continually crunched, updating the algorithms with the latest scientific evidence and putting that relative data at the clinicians’ fingertips at the point of care.

- Staying in touch. Other health and awards based programs can be tracked using these cards

Medical Smart Card in Action

John Q is leaving his home in Ohio for a business trip to New York, but before he leaves he has to make a few stops. The first stop is to his doctor for a check up and to renew his prescriptions. John has been suffering from diabetes for several years and recently had a minor heart attack. When John sees his doctor he hands him his medical smart card. His doctor downloads the card’s information onto his PC and scans the data. The doctor looks at John’s blood sugar and blood pressure levels; John inputs this information daily after self-tests. John’s doctor performs the physical exam, after which he adds the most updated information on to John’s card and also adds three prescriptions for John’s conditions. John is a good patient and takes his medication as prescribed, but his doctor knows that if John was to miss an appointment or not refill his medications within a certain window of time, not only would he (John’s doctor) get an automatic email warning, but one would also be sent to his health plan and the rest of the members of his care network (diabetes educator, the staff nurse in John’s office, etc).

John’s next stop is to the drug store, where he hands his card to the pharmacist who is able to download John’s card in seconds and fill his prescriptions. Because John has to punch in his PIN number to fill the prescription there is little chance of fraud. Things are moving quite well and John has some free time on his hands, so he heads to the gym for his cardiac rehab. When John enters the gym he hands his card to a front desk staff member who inputs the visit on his card. Tracking these visits has allowed John to save several hundreds dollars on his medical insurance from his health plan.

Pleased that he’s gotten all these tasks done, John gets to the airport ahead of time and departs Ohio for New York.

It is John’s fifth time in New York and he has really developed a feel for the city. He grabs his bags and hails a cab like a local. Twenty minutes into the trip, his cab gets into a serious accident. John is left unconscious and banged up. Emergency services arrive, stabilize John at the scene, and load him into the ambulance. En route, the EMS tech finds John’s smart card and loads the data onto his palm pilot. The tech emails John’s records to the emergency staff at the hospital. Instantly, the care network knows who to notify, what medications he is on, allergies, his chronic conditions, his most recent MRI and blood work. The doctors also discover that John was born with a harmless blood protein disorder consistent in renal disease. This simple piece of information saved John, the hospital and his health plan over seventy thousand dollars in needless medical testing.


Providers and Medical Smart Card
-Real Time Data at the Point of Care
-Improved Tracking of Patients
-Improved Storage and Access of Medical Records
-Reduction in Fraud
-Reduction in Medical Errors
-Reduction in Needless Medical Testing
-Streamlined Billing and Improved Interaction with Patients and Health Plans
-Improved Tele-Health and Remote Monitoring of Patients
-Prevention of Dangerous Drug Conflicts

Health Plans and Medical Smart Cards
-Improved Risk Assessment and Risk Adjustment
-Improved Claims Processing and Pre-Certification for Procedures
-Reduction in Fraud
-Provide Better Patient Information (Billing and Benefits)
-Improved Communication with Care Network
-Improved Assessment of Disease Management and Disease Prevention Programs
-Reduction in Needless Medical Testing
-Improved Medication Compliance

Hospitals and Medical Smart Cards
-Real Time Data at the Point of Care
-Improved Tracking of Patients
-Improved Storage and Access of Medical Records
-Reduction in Fraud
-Reduction in Medical Errors
-Reduction in Needless Medical Testing
-Streamlined Billing and Improved Interaction with Patients and Health Plans
-Improved Tele-Health and Remote Monitoring of Patients
-Prevention of Dangerous Drug Conflicts


Conclusion

Aggressive disease care and prevention is necessary. Additionally, streamlining our bloated health care system should be a national priority, as it is vital for the survival of that system. Through technology there is now a greater ability to manage patient care, and link it to the entire care network. A medical smart card can empower not only the patient but the whole network, improving medical outcomes and saving money across the board. At this time the health care industry breaks the number-one rule that has allowed many other industries to thrive: Putting the right information in the right hands at the right time!

Vote On This Idea

Do you approve of this idea?

Document Actions

Great Idea!

Posted by Frank, Independant at Apr 28, 2008 04:21 PM
Anything that makes our health care system more efficient, and safer and easier for the patient, is a great thing.

This is worth discussing

Posted by Wayne Bobby at Apr 28, 2008 05:06 PM
If this can stream line healthcare it is worth talking about

Multi Application Smart Card

Posted by Denise Schipani at Apr 28, 2008 05:36 PM
This is a terrific idea. I watched a recent PBS Frontline documentary, "Sick Around the World," and found out that Japanese citizens have something like this, and their system struck me as an ideal model for a modern, wealthy, industrialized nation like the U.S.

Outcomes and Security???

Posted by Jane Baldwin, RN at May 14, 2008 04:02 PM
I think this is a very interesting idea. It shows that there is a lot of fat in our health care system than can be cut by using proper technologies. A medical smart card can really help to tie together a lot of loose ends and achieve better outcomes! I think the real world example puts it all together well.

I am concerned about security. What happens if you lose your card? How safe are your personal medical records?

Jane-

Security

Posted by Robert Steigerwald, Independent Health Care Consultant at May 20, 2008 02:26 PM
Jane:

Because your card is PIN (personal identification number), protected no one can retrieve your personal information. If someone was to find your card they would not be able to perform any medical transactions without having your personal PIN number. The card would essentially be useless. In a hospital for example no unauthorized staff can read your medical or billing information without the right security clearance.
 
Regards,
Robert Steigerwald

Probably the only solution that will solve the problem (data flow)

Posted by Chris Chan at May 27, 2008 05:13 AM
Robert, i have the same thought. Lucky i searched before posting this idea otherwise it will just be a dup. I am a pharmacy director at a health plan, the vision is to collect data easily... allow any healthcare providers to do the same and treat patients effectively... however, there are just too many systems in place, too many road blocks and healthcare providers are not able to stick with one solution. With one smart card system and reading platform, any providers are able to access the info with the permission of the patients. Health plans are able to collect data easily via the patients or the providers. there are just too many benefits...
with the adoption of ccr-xml standard... i can see we can make healthcare more cost-effective.

Chris Chan

Posted by Robert Steigerwald, Independent Health Care Consultant at May 28, 2008 12:35 PM
Thank you for your comments…they are well appreciated! I believe that the financial industry is on a crash course with smart card solutions (payments, rewards and coupons and data transfer). It is inevitable that healthcare will follow suit.

Thanks and regards,
Robert Steigerwald
rsteigerwald@gmail.com

Medical Smart Card

Posted by Ann Marie Healthways at Jun 10, 2008 01:10 AM
this is a fantastic idea! I would certainly streamline our current system.

Linked In Comments

Posted by Robert Steigerwald, Independent Health Care Consultant at Jun 11, 2008 03:19 PM
Here are some comments posted on LinkedIn.com regarding is Medical Smart Card Idea.
I was actually thinking of making one. I'm an EDI programmer at HealthNow / Blue Cross Blue Shield of WNY. One key item is not to have any PHI on the card but to use some of the member information to automatically retrieve information from the insurance company by creating a 270 (Eligibility) 276 (Claim Status) 278 (Request for review) or 834 (Benefit Enrollment) transaction. Many insurance companies have a secured gateway of some sort to get this information in real time and there are many providers and institutions (hospitals) this use this technology. Unfortunately there aren't many that use a card. It would be awfully convenient if an ambulance could preforward the insurance information to a hospital or immediate care facility before the patient arrives in triage.
From DP

In the early 90s we were doing some consulting for a national lab that was getting involved in "technology reuse program" (TRP) ... i.e. push to commercialize gov. technology. One of the technologies was smartcards and one of the markets tried to push it into was medical and health care.
somewhat the problem was
1) smartcards was sort of an '80s solutions ... portable/pocketable computing ... but there wasn't any comparable portable input/output capability ... so a huge amount of effort went into standardization to have interoperable stations where the information could be used. However, along came PDAs and cellphones (which also had portable input/output capability) and almost immediately obsoleted that whole metaphor
2) timeliness and availability of the data ... increasingly ubiquitous online environment was make access to information repository (which likely would include all sort of D/R characteristics) w/o having to replicate the information in portable smartcard.
one of the counter examples raised was emergency scenario ... but the response was that all scenarios where technology, time, equipment and expertise was available to make use of a smartcard ... there would also have the technology for online access.
disclaimer: we have done a lot of work and patents (all assigned) in the area of a "stupid" chip (i.e. KISS) as opposed to a "smart" card/chip.
From LW

. This already exists, and is used commercially. Google "medical kiosk" or "medical office kiosk check-in" and see what you find. This isn't my industry, but I have client companies using this.
2. You don't have to keep PII off the card, as long as the card belongs to the consumer, and not the company. The legal relationship must simply be that the patient/consumer allows the company to update their information based on treatment, billing changes, and so on. This applies to HIPPA, FCRA, FACTA, and other consumer/patient based privacy initiatives. Every time a consumer's data is accessed, the consumer/patient must give consent. If the data is stored on a client or server other than the card, HIPPA/FACTA/whatever becomes involved, but the transaction transferring this information has been authorized by the consumer. This done now, and is a growing trend with a lot of traction.
From NS

I had done a program on smart cards for providing healthcare for the victims of a gas tragedy about 6 years back. Apart from providing the basic personal information and primary health information of the beneficiary - on the card itself - it was also used for maintaining a history of ailments, diagnosis & treatment provided.
Another similar project was designed for the Armed forces about 3 years back - to allow for healthcare benefits to be provided to Millions of servicemen/women across the country for a small membership fee.
From AM

I would argue that Smart Cards have never been in more widespread use than they are today. If you use a GSM mobile phone (and at last count ~3 Billion people were) you’re using a smart card every time you make a call. All those new touch passes are smart cards too and the new Pay By Mobile wave about to his us is also a smart card implementation (hosted on your current SIM). Ultimately the reasons for the Smart Card’s success is the security provided by PIN based authentication to an on card encryption processor tied with ‘over the air’ application provisioning (which describes how applications can be setup on the card by a Trusted Services Manager, which can be a third party). Better still the on-chip capabilities of the card can digitally sign and encrypt messages sent with them.
I think this is a great idea.
From DR

Smart Card for Security, Not Data

Posted by Marshall Maglothin, Blue Oak Consulting LLC at Jun 19, 2008 11:49 PM
Security is the #1 concern of the public concerning their health care data.

We should take the Smart Card cue from the U.S. government: it is not an ultimate storage device, but rather a secure credentials ID. The Smart Card can provide biometic info, that when read and verified with the holder, can provide accurate identification of the holder and location of the holder's verious data reposititories.
Then each health data repository, being assured that the requester is indeed who they say they are, can grant appropriate data access for that individual.


Marshall

Posted by Robert Steigerwald, Independent Health Care Consultant at Jun 26, 2008 01:09 AM
Marshall,
Thank you for your insight.
Regards,
Robert Steigerwald

More comments posted on Linked In

Posted by Robert Steigerwald, Independent Health Care Consultant at Jun 26, 2008 01:13 AM
Color me confused but if I was going to have a medical smart card I would want my PHI on it. If I recall correctly I am entitled to copies of any/all information regarding my health care. Furthermore I would be responsible for securing and releasing said information in my possession. To the best of my knowledge a smartcard can be encrypted and pass coded I don’t see any reason not to put PHI on it.

Most of the smart card implementations I’ve seen were directly security or identification related. I think if a coded smartcard is good enough to provide authentication for a bank’s network it’s good enough to use for my PHI as well. Individuals can also use the card as a form of consent as a personal Key assigned to the user can be stored in the encrypted area of the card.The user shouldbe the only one with the passcode that decrypts that information.

Given that Information contained on such a device could aid in the field in case of any emergency it might be a good idea to code parts of the information with a PKI like system so authorized medical providers can access vital information like drug allergies and blood type that might aid in stabilizing the patient for transport. Using an encrypted and keyed structure can also be helpful in logging who accessed the information and when.

I believe the biggest hurdle in this situation would be hammering out a standard everyone can agree on. Lots of providers have dissimilar methods of storage and transmittal of information. Different systems and infrastructures are going to have to interface with a common device I think the medical industry like many others has a long way to go in unifying standards that are widely adopted.
Clarification:

Id prefer have my information encrypted on a card than stamped on a bracelet where everyone can see it.(that being the current sulotion to inform EMT's of situations that make stabilizing the patient difficult)
From BF

This is not a new idea. Back three years ago Humana had set up a "kiosk" based card system that combined FSA, HSA, Credit and Insurance payments on one card. This card when swiped at your Doc's office would real-time adjudicate the claim so that the Doc not only had their dollars but could get the patient records through the secure system also.

The catch is standards; here is a link to the WEDI-SNIP health ID card subgroups publication.

If you have a standard for things and if it is applied across the board then it works, no standard and you get chaos and no implementation, especially in this industry where we have had HIPAA beginning in 1996 and are now (BILLIONS of $$$ LATER) just going through being able to identify providers with a universal number.

HIPAA AS calls for enumerating providers, payers and patients for the sake of cost savings in health care. Ask anyone in this industry what 4010A1 or NPI did to claim payment flow. A one payer system is needed and it can't be CMS.

Back to topic at point, great idea, needs to be done, needs to be adopted, has potential to save big $$$. The card is just that, a smart chip card that accesses data but doesn’t store it. Patients, EOB, balance on HSA/FSA; Doc’s access patient records test results; these are stored on MS, Google, the payer, other providers etc. The Payer, they get nothing, they need to pay the bills and stop looking to nothing but the bottom line.

America, number one in Health Care costs, number 37th in quality!
From FM




A Multi Application Medical Card

Posted by ravi at Jul 18, 2008 02:54 AM
Robert,
The idea of carrying a chip with programmable feature and function based access control is phenomenal. I though believe in electronic world, what is still unsettling to me is that reliability of the system. For this reason, I think albeit waste, there must be maintenance of paperwork or a portion of it.

Second challange that comes with is again the audit accuracy. The medical errors and injuries are not only function of lack of information or misreading of information, it can also be a function of entry error.

I have debated few times with some believers. I think there is a lot of great benefits in it? No body is telling me the risks and that is what is scary..

A good product with sound risk mitigation plan, and proper control structure will be groundbreaking leam towards the improvement.

rgds
ravi
Bipro Inc, Leading source of Lean Six Sigma Solutions for Healthcare Transformation
http://www.biproinc.com/healthcare_services.html
Contact    Site map    Privacy Policy
© 2008 Developed by Humana to create an ongoing dialogue to reform health care.