Enhancing Transparency and Security in Telehealth Records Using Dual One-Time Password Authorization

Authors

  • S. Hemalatha PhD (CSE) CSE (AIML), Kakatiya Institute of Technology and Science, Warangal, India https://orcid.org/0000-0002-0049-1167
  • Kiran Mayee Adavala PhD (CSE) CSE (AIML), Kakatiya Institute of Technology and Science, Warangal, India
  • Pullela S.V.V.S.R. Kumar PhD (CSE) Department of Computer Science and Engineering, Aditya University, Surampalem, Andhra Pradesh, India
  • Karthick PhD Saveetha Engineering College, Tamil Nadu, India
  • N. Muthuvairavan Pillai PhD Department of Computer Science and Business Systems, RMD Engineering College, Chennai, India
  • G. Krishna Mohan PhD (CSE) Department of CSE, Koneru Lakshmaiah Education Foundation, Guntur India

DOI:

https://doi.org/10.30953/thmt.v11.691

Keywords:

e-health, hypertext markup language, one-time password, teleconsultation, telehealth record, telemedicine record

Abstract

Background: Many information technologies have supported the growth of the medical field worldwide. Telehealth consultation is a rapidly developing area in healthcare that aims to optimize time utilization during patient–physician consultations. To support telehealth consultations, healthcare providers make patient records available on online platforms to review medical history and treatment progress. Accordingly, government and healthcare organizations have introduced telehealth, telemedicine, and systems for maintaining e-health records. When such data are hosted on online platforms, it becomes vulnerable to unauthorized access and potential security threats. Although security mechanisms such as firewalls and authentication controls protect telehealth records (THRs), these records are frequently accessed by government agencies, researchers, and healthcare professionals for medical analysis and research. However, authorities often do not explicitly enforce transparency regarding how and where THRs are accessed. Often, patients and treating physicians are not fully aware of external access to health records before data disclosure. 

Methods: To address this limitation, the authors propose an architectural framework for THR access that uses a one-time password (OTP)- based dual-authorization mechanism to ensure both security and transparency. 

Results: The proposed approach enables health record access only with the knowledge and explicit authorization of both the patient and the physician, thereby embedding transparency within the access control workflow. The system is built using web pages written in Hypertext Markup Language (HTML), and controlled testing is used to ensure the operational workflow functions. Experimental results indicate that the OTP delivery time is 15 ms, the application programming interface (API) response time is 25 ms, the THR load time is 15 ms, and the authentication success rate is 97%. 

Conclusions: Experimental results indicate: 

- OTP delivery time is 15 ms, 

- application programming interface (API) response time is 25 ms,,

- THR load time is 15 ms, and 

- authentication success rate is 97%. 

Downloads

Download data is not yet available.

References

1. Balasankar Ganesan, Raymond K.Y. Tong, Chapter 1 - Historical overview and the evolution of digital health, Editor(s): Raymond K.Y. Tong, Balasankar Ganesan, Digital Technology in Public Health and Rehabilitation Care, Academic Press, 2025, Pages 3-18, ISBN 9780443222702,https://doi.org/10.1016/B978-0-443-22270-2.00001-0.

2. Vesselkov A, Hämmäinen H, Töyli J. Technology and value network evolution in telehealth. Technol Forecast Soc Change. 2018;134:207–222. doi:10.1016/j.techfore.2018.06.011

3. Khalid F, Abbas S, Sadeq A, Aslam B. Is Information Sharing During Online Medical Consultations a Patient’s Concern? An Extended Theoretical Model. Human Behavior and Emerging Technologies. 2025(1):7342994. https://doi.org/10.1155/hbe2/7342994

4. A. Horsch and T. Balbach, "Telemedical information systems," in IEEE Transactions on Information Technology in Biomedicine, vol. 3, no. 3, pp. 166-175, Sept. 1999, doi: 10.1109/4233.788578.

5. Holmgren AJ, Thombley R, Sinsky CA, Adler-Milstein J. Changes in physician electronic health record use with the expansion of telemedicine. JAMA Intern Med. 2023;183(12):1357–1365. doi:10.1001/jamainternmed.2023.5738

6. Chumbler NR, Haggstrom D, Saleem JJ. Implementation of health information technology in Veterans Health Administration to support transformational change: Telehealth and personal health records. Med Care. 2011;49(Suppl):S36–S42. doi:10.1097/MLR.0b013e3181d558f9

7. Ambinder EP. Electronic health records. J Oncol Pract. 2005;1(2):57–63. doi:10.1200/JOP.2005.1.2.57

8. Jacob PD. Management of patient healthcare information: Healthcare-related information flow, access, and availability. In: Gogia S, editor. Fundamentals of Telemedicine and Telehealth. Academic Press; 2020. p. 35–57. doi:10.1016/B978-0-12-814309-4.00003-3

9. Kumar MS, Ganesh D. Improving telemedicine through IoT and cloud computing: Opportunities and challenges. Adv Eng Intell Syst. 2024;3(3):123–135. doi:10.22034/aeis.2024.474171.1217

10. AlOsail D, Amino N, Mohammad N. Security issues and solutions in e-health and telemedicine. In: Pandian A, Fernando X, Islam SMS, editors. Computer Networks, Big Data and IoT. LNDECT, vol 66. Springer; 2021. doi:10.1007/978-981-16-0965-7_26

11. Ge S, Song Y, Hu J, Tang X, Li J, Dune L. The development and impact of adopting electronic health records in the United States. Health Care Sci. 2022;1(3):186–192. doi:10.1002/hcs2.21

12. Costa RT, Adib K, Salama N, Davia S, Millana AM, Traver V, et al. Electronic health records and data exchange in the WHO European region. Int J Med Inform. 2025;194:105687. doi:10.1016/j.ijmedinf.2024.105687

13. Ondogan AG, Sargin M, Canoz K. Use of electronic medical records in the digital healthcare system. Inform Med Unlocked. 2023;42:101373. doi:10.1016/j.imu.2023.101373

14. Sivan R, Zukarnain ZA. Security and privacy in cloud-based e-health systems. Symmetry. 2021;13(5):742. doi:10.3390/sym13050742

15. Oh SR, Seo YD, Lee E, Kim YG. A comprehensive survey on security and privacy for electronic health data. Int J Environ Res Public Health. 2021;18(18):9668. doi:10.3390/ijerph18189668

16. Harris Y, Goldwater JC. Lack of evidence for telehealth fraud. J Telemed Telecare. 2023;31(2):301–305. doi:10.1177/1357633X231177739

17. Kadakia KT, Howell MD, DeSalvo KB. Modernizing public health data systems. JAMA. 2021;326(5):385–386. doi:10.1001/jama.2021.12000

18. Szalados JE. Medical records and confidentiality. In: The Medical-Legal Aspects of Acute Care Medicine. Springer; 2021. doi:10.1007/978-3-030-68570-6_13

19. Subramanian H, Sengupta A, Xu Y. Patient health record protection beyond HIPAA. J Med Internet Res. 2024;26:e59674. doi:10.2196/59674

20. Semantha FH, Azam S, Shanmugam B, Yeo KC, Beeravolu AR. A conceptual framework to ensure privacy in patient record management systems. IEEE Access. 2021;9:165667–165689. doi:10.1109/ACCESS.2021.3134873

21. Lalem F, Laouid A, Kara M, Al-Khalidi M, Eleyan A. A novel digital signature scheme for advanced asymmetric encryption. Appl Sci. 2023;13(8):5172. doi:10.3390/app13085172

22. Hagui I, Msolli A, Ben Henda N, et al. A blockchain-based security system with light cryptography. Multimed Tools Appl. 2024;83:52451–52480. doi:10.1007/s11042-023-17643-5

23. D. Zeng, A. Badshah, S. Tu, M. Waqas and Z. Han, "A Security-Enhanced Ultra-Lightweight and Anonymous User Authentication Protocol for Telehealthcare Information Systems," in IEEE Transactions on Mobile Computing, vol. 24, no. 5, pp. 4529-4542, May 2025, doi: 10.1109/TMC.2025.3526519.

24. Dahl-Popolizio S, Carpenter H, Coronado M, Popolizio NJ, Swanson C. Telehealth for occupational therapy during COVID-19. Int J Telerehabil. 2020;12(2):77–92. doi:10.5195/ijt.2020.6328

25. Chattopadhyay A, Ho T, Beyene N. A W3H2 analysis of security and privacy issues in telemedicine. In: Proc ACMSE ’23. ACM; 2023. p. 47–55. doi:10.1145/3564746.3587109

26. AlAmr MI. Building patient trust through enhanced data security: A Saudi hospital case study. Galore Int J Appl Sci Humanit. 2024;8(4):25–33. doi:10.52403/gijash.20240405

27. Vidanagamachchi S, Mallikarachchi S. Exploring privacy and security concerns in Sri Lankan telemedicine systems. Sri Lankan J Appl Sci. 2024;3(1):15–22.

28. Insani WN, Zakiyah N, Puspitasari IM, et al. Digital health technology interventions for medication safety. J Med Internet Res. 2025;27:e65546. doi:10.2196/65546

29. Rathee T, Tomer M, Chadha IK. Cloud computing applications in digital health. In: Explainable IoT Applications. Springer; 2025. doi:10.1007/978-3-031-74885-1_5

30. Manasa R, Jayanthiladevi A. CyVHealth: Intelligent cybersecurity architecture for virtual medical consultation. Cybersecur Appl. 2025;3:100112. doi:10.1016/j.csa.2025.100112

31. Narayanasamy D. Transforming healthcare with secure cloud infrastructure. Int J Sci Res Comput Sci Eng Inf Technol. 2025;11:633–644. doi:10.32628/CSEIT25111271

32. Patra D, Rajagopalan N. Integration of emerging technologies in cybersecurity for healthcare. Comput Secur. 2026;161:104763. doi:10.1016/j.cose.2025.104763

33. Mahto D, Yadav D. Cloud-based secure telemedicine information system using crypto-biometric techniques. EAI Endorsed Trans Pervasive Health Technol. 2020. doi:10.4108/eai.13-7-2018.163837

34. Suleski T, Ahmed M, Yang W, Wang E. Review of multi-factor authentication in IoHT. Digit Health. 2023;9. doi:10.1177/20552076231177144

35. Zhang W, Hasan MK, Jailani NB, et al. Lightweight security model for telehealth confidentiality. Comput Hum Behav. 2024;153:108134. doi:10.1016/j.chb.2024.108134

36. Ahmad RW, Salah K, Jayaraman R, et al. Role of blockchain in telehealth and telemedicine. Int J Med Inform. 2021;148:104399. doi:10.1016/j.ijmedinf.2021.104399

37. Shrimali B, Surati S, Trivedi H. MediBlock: Blockchain-based secure healthcare architecture. In: Proc InCACCT 2023. IEEE; 2023. doi:10.1109/InCACCT57535.2023.10141848

38. Kumar M, Raj H, Chaurasia N, Gill SS. Blockchain-inspired secure data exchange for healthcare 4.0. IoT Cyber-Phys Syst. 2023;3:309–322. doi:10.1016/j.iotcps.2023.05.006

39. Odeh A, Abdelfattah E, Salameh W. Privacy-preserving data sharing in telehealth services. Appl Sci. 2024;14(23):10808. doi:10.3390/app142310808

40. Lone SA, Mir AH. Novel OTP-based tripartite authentication scheme. Int J Pervasive Comput Commun. 2022;18(4):437–459. doi:10.1108/IJPCC-04-2021-0097

41. Akilan SS, Sekar JR. OTP-Q encryption and Diffie–Hellman authentication for e-healthcare data. Technol Health Care. 2023;31(6):2073–2090. doi:10.3233/THC-220588

42. B V H, U U, Mounika P, Shamala LM. OTP verification and zero trust security for medical records. In: Proc ICSTSN 2024. IEEE; 2024. doi:10.1109/ICSTSN61422.2024.10671108

43. Khan A, Khan SS, Shirazi ZY, et al. Hybrid mobile and web-based health record management system. In: Proc ICAIQSA 2024. IEEE; 2024. doi:10.1109/ICAIQSA64000.2024.10882381

44. Dahal S. TelecarePLUS: An Extensive Telemedicine Platform. Master’s Thesis, Concordia University of Edmonton; 2023.

45. Ghanbari P. TelecarePLUS: Bridging the Gap Between Providers and Patients. Master’s Thesis, Concordia University of Edmonton; 2023.

46. Shaibu IA, Caroline OA, Nathaniel S. Development of e-health portal with smart authentication. J Eng Eng Technol. 2024;18(1):20–33

47. Zulkifl Z, et al. FBASHI: Fuzzy and blockchain-based adaptive security for healthcare IoTs. IEEE Access. 2022;10:15644–15656. doi:10.1109/ACCESS.2022.3149046

48. Hegde G, Gupta S, Prabhu GM, Bhandary SV. EyeEncrypt: Secure retinal image segmentation. In: ATIS 2022. CCIS, vol 1804. Springer; 2023. doi:10.1007/978-981-99-2264-2_9

49. Es-sabry M, El Akkad N, Merras M, Saaidi A, Satori K. New color image encryption algorithm. In: Embedded Systems and Artificial Intelligence. Springer; 2020. doi:10.1007/978-981-15-0947-6_55

50. Alghamdi T, Gebali F, Salem F. Multifactor authentication for smart emergency medical response. Int J Telemed Appl. 2022. doi:10.1155/2022/5394942

51. Patel I, Jain S, Vishwajeet JK, Aggarwal V, Mehra P. Securing electronic healthcare records in web applications. Int J Eng Adv Technol. 2021;10(5). doi:10.35940/ijeat.E2781.0610521

52. Gupta S, Sharma HK, Kapoor M. Smart healthcare and telemedicine systems. In: Blockchain for Secure Healthcare Using IoMT. Springer; 2023. doi:10.1007/978-3-031-18896-1_1

53. Sharma HK, Choudhury T, Mor A. Methodologies for improving telehealth quality and safety. In: Telemedicine: The Computer Transformation of Healthcare. Springer; 2022. doi:10.1007/978-3-030-99457-0_14

54. Talal AH, Sofikitou EM, Jaanimägi U, et al. Patient-centered telemedicine framework. J Biomed Inform. 2020;112:103622. doi:10.1016/j.jbi.2020.103622

55. Deris MSM, Mohamed MA, Mohamed RR, et al. Challenges in access to health facilities for rural citizens. Int J Eng Trends Technol. 2021;69(8):36–40. doi:10.14445/22315381/IJETT-V69I8P205

56. Rajput AR, Masood I, Tabassam A, et al. Data privacy and security in mHealth applications. Soft Comput. 2023;27:18165–18180. doi:10.1007/s00500-023-09265-8

57. Aggrey R, Adjei BA, Afoduo KO, Dsane NAK. Securing telehealth platforms. Int J Multidiscip Res. 2024;6(6).

58. Perez K, Wisniewski D, Ari A, et al. AI and telemedicine in rural communities. Healthcare. 2025;13(3):324. doi:10.3390/healthcare13030324

59. Uchechukwu BN, Ohinameuwa A. Enhanced health record information management system using mobile framework. J Sci Technol. 2025;30(3). doi:10.20428/jst.v30i3.2750.

Downloads

Published

2026-10-01

How to Cite

s, H., Mayee Adavala PhD (CSE), K., Kumar PhD (CSE), P. S., Karthick PhD, K. P., Muthuvairavan Pillai PhD, N., & Krishna Mohan PhD (CSE), G. K. M. P. (CSE). (2026). Enhancing Transparency and Security in Telehealth Records Using Dual One-Time Password Authorization. Telehealth and Medicine Today, 11(3). https://doi.org/10.30953/thmt.v11.691

Issue

Vol. 11 No. 3 (2026): Telehealth and Medicine Today

Section

Use Case/Pilot/Methodology

License

Copyright (c) 2026 Hemalatha s

Creative Commons License

This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.

Authors retain copyright of their work, with first publication rights granted to  Telehealth and Medicine Today (THMT).

THMT is published under a Creative Commons Attribution-NonCommercial 4.0 International License. 

 

Most read articles by the same author(s)