473,783 Members | 2,376 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Unique ID

I have a medical records database. At this moment one server.
Providence willing, and if things go well for me, I may have 9 other
servers join in.

Each patient will have, by GENERATE_UNIQUE (), a unique ID from the 10
servers, but each server identifies its own patients by a sequential
number.

Someone goes to the database and asks to see the record of
PATIENTNUMBER 100. There will be ten results, because everyone has a
PATIENTNUMBER 100. The intent is that the user will choose the right
one.

However, the very fact that there *exists* a record for anyone other
than the patient whom that user has the right to see violates HIPAA
law.

That is, should there be N PATIENTNUMBER 100's, then N-1 would be
other than unique to the user's query. The user is not allowed to
even know of the existence of the N-1 patients.

Penalties are in the tens and hundreds of thousands of dollars and
prison time!

What to do?
Nov 12 '05 #1
5 2650
Stanley Sinclair wrote:
I have a medical records database. At this moment one server.
Providence willing, and if things go well for me, I may have 9 other
servers join in.

Each patient will have, by GENERATE_UNIQUE (), a unique ID from the 10
servers, but each server identifies its own patients by a sequential
number.

Someone goes to the database and asks to see the record of
PATIENTNUMBER 100. There will be ten results, because everyone has a
PATIENTNUMBER 100. The intent is that the user will choose the right
one.

However, the very fact that there *exists* a record for anyone other
than the patient whom that user has the right to see violates HIPAA
law.

That is, should there be N PATIENTNUMBER 100's, then N-1 would be
other than unique to the user's query. The user is not allowed to
even know of the existence of the N-1 patients.

Penalties are in the tens and hundreds of thousands of dollars and
prison time!

What to do?


What happens when you create id by concatenating value of CURRENT
SERVER and result of GENERATE_UNIQUE ()?

Jan M. Nelken
Nov 12 '05 #2
Stanley,

What speaks against using a natural key, like the patients social
insurance number or the health insurance ID?

Cheers
Serge
--
Serge Rielau
DB2 SQL Compiler Development
IBM Toronto Lab
Nov 12 '05 #3
Stanley Sinclair wrote:
I have a medical records database. At this moment one server.
Providence willing, and if things go well for me, I may have 9 other
servers join in.

Each patient will have, by GENERATE_UNIQUE (), a unique ID from the 10
servers, but each server identifies its own patients by a sequential
number.

Someone goes to the database and asks to see the record of
PATIENTNUMBER 100. There will be ten results, because everyone has a
PATIENTNUMBER 100. The intent is that the user will choose the right
one.

However, the very fact that there *exists* a record for anyone other
than the patient whom that user has the right to see violates HIPAA
law.

That is, should there be N PATIENTNUMBER 100's, then N-1 would be
other than unique to the user's query. The user is not allowed to
even know of the existence of the N-1 patients.

Penalties are in the tens and hundreds of thousands of dollars and
prison time!

What to do?


Modify application such that at startup it calls sqleseti() API - which
allows to set client workstation name, accounting string, application
name etc etc.

See cli_info.c (or cli_info.cxx - depending on your believes).

Use some substring of CURRENT CLIENT_WRKSTNNA ME special register
concatenated with result of GENERATE_UNIQUE () call to have id which
could be unique across multiple machines.

One example which guarantees uniqueness would be to get MAC address of
the network card inside routine issuing sqleseti() call and store this
MAC address as workstation name.

Jan M. Nelken
Nov 12 '05 #4
"Serge Rielau" <sr*****@ca.e ye-be-em.com> wrote in message
news:ca******** **@hanover.toro lab.ibm.com...
Stanley,

What speaks against using a natural key, like the patients social
insurance number or the health insurance ID?

Cheers
Serge
--
Serge Rielau


That may not work. I heard about this identical problem myself years ago,
but not sure how they decided to handle it (pre HIPA laws).

The problem is the many poor people who seek free medical attention at
clinics in public hospitals. The illegal immigrants without a social
security number are issued id cards with a unique number to track the
patient, but the cards get shared by many other illegal aliens who are
afraid to tell the hospital their real names and afraid to get their own id
cards (with a unique number). This is true even though the hospitals do not
ever turn them in to immigration.

What happens is that when the doctor pulls up their medical records on the
computer (or even paper files), they are really composite records of many
different people who used the same id card, and it drives the docs crazy. So
Juan Gonzalez with a unique id that he is issued (in lieu of a social
security number) has just about every known medical ailment on his record.
They have waste a lot of time figuring out what their medical history is to
make sure they get the right diagnosis and treatment. Of course the public
hospitals are already under-funded, and this makes things even worse.
Nov 12 '05 #5
This sounds like a prime candidate for a biometric solution.

It would be insane to send someone like Stanley to jail for failing to
distinguish between umpteen people who share the same card. It is insane to
expect the doctors to distinguish between umpteen people who share the same
card and to keep a usable patient history in this situation.

The real problem here is the card sharing and that's what needs to get
addressed. That won't be solved by database design but it may be solved by
using biometrics: if the patient's photograph (or fingerprints or a retina
scan) are taken when the card is issued and the same biometric is used to
verify that the patient and the card match when the service (medical
treatment) is given, you have a chance to keep a realistic medical history
and the doctor finally has a fighting chance to treat the patient
appropriately.

I don't know whether the appropriate governments allow use of biometrics in
ID cards but, if not, I don't see any realistic hope of solving this
problem. Then there will be a political fight as the politicians responsible
for health systems try to get people to see that this is the only reasonable
solution, then duking it out in court with the people who will inevitably
see biometrics as Big Brother and resist their use. In 10 or 20 years, this
might get settled, assuming the necessary 'political will' exists.
Otherwise, the idea of keeping medical history for shared cards is a farce
that will be perpetuated, which will mean that people like Stanley live in
fear that they will go to jail for things over which they have no control
and doctors will live in fear that they will kill patients, either because
they ignored obviously shared medical histories or because they *didn't*
ignore them.

Rhino

"Mark A" <ma@switchboard .net> wrote in message
news:Ww******** *********@news. uswest.net...
"Serge Rielau" <sr*****@ca.e ye-be-em.com> wrote in message
news:ca******** **@hanover.toro lab.ibm.com...
Stanley,

What speaks against using a natural key, like the patients social
insurance number or the health insurance ID?

Cheers
Serge
--
Serge Rielau
That may not work. I heard about this identical problem myself years ago,
but not sure how they decided to handle it (pre HIPA laws).

The problem is the many poor people who seek free medical attention at
clinics in public hospitals. The illegal immigrants without a social
security number are issued id cards with a unique number to track the
patient, but the cards get shared by many other illegal aliens who are
afraid to tell the hospital their real names and afraid to get their own

id cards (with a unique number). This is true even though the hospitals do not ever turn them in to immigration.

What happens is that when the doctor pulls up their medical records on the
computer (or even paper files), they are really composite records of many
different people who used the same id card, and it drives the docs crazy. So Juan Gonzalez with a unique id that he is issued (in lieu of a social
security number) has just about every known medical ailment on his record.
They have waste a lot of time figuring out what their medical history is to make sure they get the right diagnosis and treatment. Of course the public
hospitals are already under-funded, and this makes things even worse.

Nov 12 '05 #6

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

2
2303
by: kevin parks | last post by:
hi. I've been banging my head against this one a while and have asked around, and i am throwing this one out there in the hopes that some one can shed some light on what has turned out to be a tough problem for me (though i am getting closer). i have been mucking with a lot of data in a dictionary that looks like:
26
45447
by: Agoston Bejo | last post by:
I want to enforce such a constraint on a column that would ensure that the values be all unique, but this wouldn't apply to NULL values. (I.e. there may be more than one NULL value in the column.) How can I achieve this? I suppose I would get the most-hated "table/view is changing, trigger/function may not see it" error if I tried to write a trigger that checks the uniqueness of non-null values upon insert/update.
3
27471
by: June Moore | last post by:
Hi, I would like to add a unique index that consists of two fields in a table. e.g. tbl_A (field1,field2) -- field1 & field2 Indexed and combination must be Unique. Can anyone tell me the actual sql syntax to create this index? Thanks, June.
5
10876
by: Kamil | last post by:
Hello What should I use for better perfomance since unique constraint always use index ? Thanks Kamil
6
2099
by: Bob Stearns | last post by:
I was under the impression that the primary key had to be a unique index. Since I usually create my primary indices before my primary keys, in order to get the indices in the same schema as their tables, it is possible , by error, to create such an index without the unique attribute. DB2 UDB 8.1.5 Linux uses such an index for the primary key anyway, thus losing the unique property of the primary key. Is this a bug or a feature, i.e. a...
4
5312
by: bwmiller16 | last post by:
Guys - I'm doing a database consistency check for a client and I find that they're building unique indexes for performance/query reasons where they could be using non-unique indexes. Note that these columns in the unique indexes are truly unique and don't constitute a collision hazard of any kind. Now, I personally wouldn't use unique where non-unique would do but I
5
16735
by: aj | last post by:
DB2 WSE 8.1 FP5 Red Hat AS 2.1 What is the difference between adding a unique constraint like: ALTER TABLE <SCHEMA>.<TABLE> ADD CONSTRAINT CC1131378283225 UNIQUE ( <COL1>) ; and adding a unique index like:
7
6670
by: Brian Keating | last post by:
Hi there, Is it possible to add a unique constraint on two columns in a table, so that the constraint is a composite of the two? i.e. these two columns together should be unique...? i.e. column1 column2 1 1 1 2
10
14702
by: Laurence | last post by:
Hi there, How to differentiate between unique constraint and unique index? These are very similar but I cannot differentiate them? Could someone give me a hand? Thanks in advance
2
4033
by: pstachy | last post by:
Hi again! I have another issue. I would like the attribute of the tag <invoice> to be unique. Made the following schema but unfortunately it doesn't validate. Could someone please indicate what is wrong or give me other solution. Thanks Very much. Regards ------------------------------------------------------------------------------------------------------------------ Schema:
0
9643
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
9480
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
10147
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
10083
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
9946
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
8968
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
0
6737
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
1
4044
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
3645
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.