RFID電子履歷應用於藥品供應鏈之安全與隱私機制

10.29614/DRMM.201107.0007

奚正德；邱榮輝；張克章

藥品供應鏈 ； RFID ； 藥品電子履歷 ； 群組驗證 ； Drug supply chain ； RFID ； Drug ePedigree ； Group proof

資訊安全通訊

17卷3期（2011 / 07 / 01）

85 - 97

繁體中文

藥品電子履歷內容涵蓋藥品供應鏈中各環節之完整記錄，藉由此履歷記錄以提升藥品供應之品質與用藥之安全。藥品電子履歷以可讀與寫紀錄之射頻識別(RFID)技術取代舊有僅能讀取之條碼(Barcode)，雖滿足了藥品履歷自動註記與即時高效處理之需求，但衍生新的安全與隱私問題。目前EPC Global藥品履歷標準，並無十分嚴謹的規範，於此，學者界紛紛提出兼顧安全與隱私的RFID藥品電子履歷協定。本文整理介紹，2007 King等修改RFID電子鈔票隱私保護機制應用至藥品供應鏈之藥品電子履歷安全協定，以及2009 Huang and Ku所提供應鏈末端之住院病人用藥安全的群組驗證協定。針對Huang and Ku用藥安全群組驗證方法，本文也介紹2009 Chien等、2010 Pedro等及2010 Wickboldt等之攻擊分析，以及2009 Chien等及2010 Yu等之改進機制，讓讀者能更深入瞭解於維護藥品供應與服用之安全考量因素。

1. (2008).,Woburn, MA:SupplyScape.
2. Dr. Mark Harrison, “Pharmaceutical tracking via the epc network”, Auto-ID Labs, Cambridge, UK, 2005..
3. “Drug Pedigree Standard Version 1.0”, EPCglobal Inc., Jan. 5, 2007..
4. “Standards for Securing the Drug Supply Chain - Standardized Numerical Identification for Prescription Drug Packages”, FDA Final Guidance for Industry, March 2010..
5. Avoine, G.(2004).Privacy issues in RFID banknote protection schemes.Proc. The 6th International Conference on Smart Card Research and Advanced Applications,Toulouse, France:
6. Chien, H.,Yang, C.,Wu, T.,Lee, C.(2009).Two RFID-based solutions to enhance inpatient medication safety.J. Med. Syst.
7. Holtzman, H.,Lee, S.,Shen, D.(2009).OpenTag: Privacy Protection for RFID.IEEE Pervasive Computing,8(2),71-77.
8. Huang, H.,Ku, C.(2009).A RFID grouping proof protocol for medication safety of inpatient.J. Med. Syst.,33(6),467-474.
9. IBM Inc.(2008).,未出版
10. Juels, A.,Pappu, R.(2003).Squealing euros: Privacy protection in RFID-enabled banknotes.Financial Cryptography
11. King, B.,Zhang, X.(2007).Applying RFID to Secure the Pharmaceutical Supply Chain.Int. Journal of Security and its Applications,1(2)
12. King, B.,Zhang, X.(2007).Securing the Pharmaceutical Supply Chain using RFID.2007 Int. Conf. Multimedia and Ubiquitous Engineering (MUE 2007),Korea:
13. Koh, R.,Schuster, E.,Chackrabarti, I.,Bellman, A.(2003).Technical Report MIT-AUTOID-WH-021Technical Report MIT-AUTOID-WH-021,AUTO-ID Center.
14. Pearson, Joseph(2005).,未出版
15. Peris-Lopez, Pedro,Orfila, A.,Hernandez-Castro, Julio,van der Lubbe, J. C. A.(2010).Flaws on RFID grouping-proofs. Guidelines for future sound protocols.JNCA
16. Sun, P.,Wang, B.,Wu, F.(2008).A new method to guard inpatient medication safety by the implementation of RFID.J. Med. Syst.,32,4327-332.
17. Wickboldt, A.-K.,Piramuthu, S.(2010).Patient safety through RFID:Vulnerabilities in recently proposed grouping protocols.J. Med. Syst.
18. Yu, Y.-C.,Hou, T.-W.,Chiang, T.-C.(2010).Low Cost RFID Real Lightweight Binding Proof Protocol for Medication Errors and Patient Safety.J. Med. Syst.