The CryptConnect project - Safe madical data transmission world wide
-
[size=14pt][b]What is cryptconnect?[/b][/size] [img]http://cryptconnect.com/cryptocontent/uploads/2013/12/Cryptconnect-logo.png[/img]
Cryptonnect is an open source project to create the best possible communication tool to share medical information.
Today most of the available tools are centralised. It is protected, but always by a third party. And can this third party really be trusted?
Daily millions of letters are transfered electronically from doctor to doctor, or from patiënt to doctor.A lot of confident information is transferred this way.
To achieve the best possible security we will use the power of the p2p network and that of current cryptocurrencies. These techniques have proven that they are very safe! Who would have thought this was possible years ago? Back then p2p was deemed very insecure and now it might be the best way to keep confident information from others!
We try to create a mondial open source solution to share sensitive data.
[size=14pt][b]How does this work?[/b][/size]
Some key elements are:
Every user will have his own adress. (just like your bitcoin/feathercoin wallet)
Every message sent will be encrypted. Only the sender and receiver will be able to decrypt it
Untill the message is received by the end user the message will stay in the peer-to-peer network
With every message sent, users will need to donate a certain amount of cryptocurrency (feathercoin) too the pool
Users who “donate†space to the cloud will receive feathercoin for their effort
Users who donate as much space as they use themselves will send messages close to free (there is always a transaction fee for the feathercoin network)[size=14pt][b]Why donate for this project[/b][/size]
Creating CryptConnect will have many consequences for the safety of your personal data. However, to create and continue to develop CryptConnect we need a budget.
Mostly something gets created and then sold to the users. To get the initial funds they need investors, shareholders etc… which in turn expect a profit.
In this case the users will not only be hospitals, medics, etc… but als regular users who can use it to communicate with their health professionals.
This is why we want CryptConnect to be available for everyone.
What will we do with the donations?
Recruit more developers
Create a solid testing environment
Perform security audits
Represent CryptConnect and convince people to use iOur website: [url=http://www.cryptconnect.com]www.cryptconnect.com[/url]
Donation links in signature (EDIT: donations are still possible - the crypto’s ill remain there - if the project goes nowhere, crypto’s are send right back to the owner)EDIT: The campaign was canceled to get started on a later time.
[s]Also: [url=http://www.indiegogo.com/projects/safe-medical-data-transmission-worldwide/x/5758175]http://www.indiegogo.com/projects/safe-medical-data-transmission-worldwide/x/5758175[/url][/s]Want to contribute, do you have some great ideas? Feel free to share!
-
How do you plan on interfacing between countries as everyone has their own standards? Whats your plan for dealing with HIPAA? Other than trying to get donations I don’t see much for a plan here… $25,000 for a start up like this seems quite low especially with all of the regulation involved in medical data transmission.
I work for a company that does this already and has a few electronic health record software packages that are used across the US. It is a pain in the ass to get things standardized even between different states in the US.
-
How do you plan on interfacing between countries as everyone has their own standards? Whats your plan for dealing with HIPAA? Other than trying to get donations I don’t see much for a plan here… $25,000 for a start up like this seems quite low especially with all of the regulation involved in medical data transmission.
I work for a company that does this already and has a few electronic health record software packages that are used across the US. It is a pain in the ass to get things standardized even between different states in the US.
Greetings,
I completely understand your concerns, and they are valid. The most important one is standardisation.
I work in Belgium as a general practisioner myself. Our system is different than that in the countries arround us.
Every country has different standards. I am most familiar with the ones in Belgium and they are already complicated.That is the reason why we want to create an open project, that is easily accessible.
What is the essence? We need SAFE communication with a TRUSTED partner. Trust is mostly the issue that complicates things: doctors and patiënts need to trust the system.
The intention is that cryptconnect provides a means of communication. The format of the message can be country dependent and need to be adapted for that specific country.For example: most of the message formats we use today (in Belgium) is in a locally created format (not XML or PDF, or doc or whatever). When it is received my the mail client it is converted to a message that the EHR can “understand”. aka a difficult proces.
For the encryption of the message we rely on the E-health platform ran by the state, which uses an SSL like encryption.
The reason it is not widely used by doctors is because there is no trust in the E-health platform.
This makes data sharing very difficult, which is a bad thing for the patiënt.Another problem: people who go to France or the US, and need medical attention there: There is no way to safely communicate what happened (except by good old fashioned letter)
A 3th problem: Most of the softwares are not available to patiënts. Lots of sensitive information gets send by mail, or an unencrypted connection.
It is the intention that Cryptconnect can be used by patiënts to fill in: web forms, general electronic questionnaires, lab results communication etc…Conlusion:
We need a safe means of communication that is trusted by doctors and patients. Which is open and which is easy to implement. And hopefully: which can be used worldwide.That P2P can be safe is already proven by projects like: Bitmessage, Cryptosphere etc…
About the budget:
25K is indeed not much for a project of this size, but its a start, it will get us going… I hope it will be the beginning of a fruitfull, yet loong journey.
Development will be one thing, promotion is another.
But you are right, more funding will propably be needed.
Since we are hoping on donations, we will be as transparent as possible about how the money is spent.And remember: Cryptocurrencies where also something new, something different but today they are (be it minor) a means to pay for things.
PS: sorry about grammatical errors, but English is not my native language
PPS: since you work for a firm involved in these kind of things, feel free to send more information or cantact me! -
This whole thing wreaks of scam I’m afraid.
From the website:
[quote]
Every user will have his own adress. (just like your bitcoin/feathercoin wallet)
Every message sent will be encrypted. Only the sender and receiver will be able to decrypt it
Untill the message is received by the end user the message will stay in the peer-to-peer network
With every message sent, users will need to donate a certain amount of cryptocurrency (feathercoin) too the pool
Users who “donate†space to the cloud will receive feathercoin for their effort
Users who donate as much space as they use themselves will send messages close to free (there is always a transaction fee for the feathercoin network)
[/quote]This isn’t a business plan. It’s not a solution for ‘secure communication’. It has nothing to do with the medial field, and completely ignores all the regulations in place for the secure storage and communication of medical records.
There’s absolutely NO reason to broadcast medical records to a p2p network. None. But let’s assume that it is in fact, for some unlisted reason, desirable that joe schmoe on the internet receives encrypted copies of my medical records.
It says, “Every user will have his own adress. (just like your bitcoin/feathercoin wallet).” So we’re reinventing email.
“Every message sent will be encrypted. Only the sender and receiver will be able to decrypt it”. We’re reinventing PGP now.
“Untill the message is received by the end user the message will stay in the peer-to-peer network” but you can’t enforce that. I can hang on to the encrypted data as long as I want.
“With every message sent, users will need to donate a certain amount of cryptocurrency (feathercoin) too the pool” What pool? Is this a centralized message broker? If your message broker is centralized, why do you need a p2p network? We’ve got this already: It’s called email.
“Users who “donate†space to the cloud will receive feathercoin for their effort” from who? The same centralized message broker presumably?
“Users who donate as much space as they use themselves will send messages close to free (there is always a transaction fee for the feathercoin network)” But I can already send message for free, thank you very much. That’s what email is for.
There’s nothing innovative about this project, and 90% of the things said are self-contradictory. Things like, “medical records” and “p2p networks”.
It says,
[quote]
To achieve the best possible security we will use the power of the p2p network and that of current cryptocurrencies. These techniques have proven that they are very safe! Who would have thought this was possible years ago? Back then p2p was deemed very insecure and now it might be the best way to keep confident information from others!
[/quote]But that’s just a bunch of claims with nothing to back them up. There’s nothing ‘secure’ about p2p networks. Crypto-currencies provide a ledger of account by establishing distributed consensus in a trustless environment. That has nothing to do with privacy, or safety with regards to your private information.
The funding rewards promise nothing except some terribly overpriced FTC ($100 for 30 FTC). There’s no delivery date, there’s no description of the services, there’s no business plan, there’s no background on who’s involved, there’s no source code, there’s no design document, there’s not even a clear problem statement and proposed solution.
Finally: This campaign will receive all funds raised even if it does not reach its goal.
This, ladies and gentlemen, is a scam. Someone has cleverly put a lot of effort into producing a website that combines fancy graphics, crypto-currencies, medical records, and fundraising together in a bid to rid you of your cash with absolutely no promise of anything tangible to sink your teeth into, and is now spending a lot of time making very dubious claims. Claims like, “We need SAFE communication with a TRUSTED partner.”, without actually making any argument for why they should be trusted, or why a trusted partner is somehow superior to a distributed consensus in a trustless environment. Claims like, “most of the message formats we use today (in Belgium) is in a locally created format (not XML or PDF, or doc or whatever). When it is received my the mail client it is converted to a message that the EHR can “understand”. aka a difficult proces.” without actually proposing a solution for standardization or why that would benefit end users. Claims like, “For the encryption of the message we rely on the E-health platform ran by the state, which uses an SSL like encryption.
The reason it is not widely used by doctors is because there is no trust in the E-health platform.” without actually pointing out that SSL is an open standard that has nothing to do with E-health or trust.For 25k (with more later), they promise to revolutionize health care without demonstrating even the slightest understanding of the technical expertise required to accomplish such a thing.
Remember these guys? https://cryoniks.com/ It’s the same thing, except these guys are aiming a lot lower.
I’d love to be proven wrong, but nothing about any of this is adding up.
-
It fails, because ledger and p2p and private info. Maybe the solution is to not have so much identifying information required by the system in the first place. Or let people have their documents on an encrypted and authenticated USB drive which they can bring along.
Now you say, but the owner of that info may not be someone able to keep track of every drug they took, every visit they had, etc.
Now we have a reason for mass storage and mass copying. BUT cryptocoin tech is maybe not ready for this task. Yet.
-
Greetings,
I read your responses yesterday and took some time to think about them.
I came to the conclusion that you are correct. Looking at the way it is right now it does look like a scam (which it isn’t).So here are the facts:
The cryptconnect project is at this moment an idea. Communication and trust are big issues in sensitive data transmission.
We where thinking outside of the box and thought: “this is a good idea”
One problem however: to get this widespread, it needs to be free to use.
Then the next problem: “ok, you can develop it, but it needs to be audited (make sure it is 100%safe) and then you need to send representatives to hospitals etc…” aka you need money
We thought the solution might be in crowdfunding. But seeing the responses, it seems there is no trust from people towards us.And for that, they are totally right! Why would they?
So, we decided to takes thing slowly, get credibility. We went in this project head first.
I canceled the campaign and are looking for a way to get things rolling in our spare time.Also, there seems to be misunderstanding: we are not planning to put peoples EHR (e-health-records) in the cloud. We are trying to create a tool to send messages (with medical data in them).
Any input, be it possitive or negative is welcome.
