CMSMS for Physicians?

[Sherri]

Wondering if CMSMS could be used as a patient portal for doctors. Perhaps modifying the FEU so that when a user logs in, they see only their specific content, which would be test results, email messages and able to send email to the docs through this system?

Would this be possible with the system now or would it require a LOT of custom programming? Custom programming is no problem. I would just have to use someone very experienced with CMSMS.

I've built one for docs using Drupal with a programmer doing custom programming that was for test results only notifications. The staff member adds the test results info through a form which writes to the DB. An email is generated to send to the patient that says please log in to view info. Patient logs in and sees their page only with all results displayed. There was no messaging built into the system for this one though. My Drupal programmer does not work with CMSMS, he just sticks with Drupal, or custom php apps for me so that's why I'm wondering if this is possible using FEU as a base or if we'd have to start from scratch.

Has anyone built something like this using CMSMS? If yes I'd love to hear form  you. My goal is to provide an affordable alternative for secure patient communications for my medical clients. Building these things from scratch is too expensive. There are third party systems, but many are cumbersome, expensive and just plain fugly.

Appreciate any suggestions!!

Thanks,
Sherri

(I am up on the HiPAA regs)

[calguy1000]

Well, the biggest problem with doing this with CMSMS would be keeping the data secure on the server.
You can use formbuilder for allowing users to send messages to the staff (depending upon what level of detail you wanted).

and you would want to make sure that you disable things like search etc, that may display private data to users.
and I would think about using a custom certificate authority so that you could explicitly generate and revoke certificates to users as another level of security on top of just plain SSL and username/password authentication.

Also, FEU doesn't have any hack prevention mechanisms in it yet (to stop brute force hack attempts).

it's all do able, but depending upon exactly what yuo want, it will take various levels of programming.

[JeremyBASS]

calguy1000 is 100% right, and I have nothing to add but I thought I'd share that I do use cmsms with some hospitals, there are mods I have in place to protect holes like calguy1000 points out and I have some very tight servers manned by super IT guys.  Just be sure you think of all the ways one may get in... block all you can.. and dbl, triple up on ways to make sure you have your data protected.  Here is a public one.. needs a major redesign which is planed fro here soon.. but it's a hospital on cmsms with a few hundered pages and lots and lots of info... http://www.sjrmc.org/  Hope this helps somewhat.. Cheers -Jeremy

[Sherri]

I would rely on my IT folks to make it secure, but your points are well taken. I was wondering if the framework was robust enough to build out the messaging part of the equation. I will have to consult with the programming pros.

Thank you for taking the time to answer my post!! I really appreciate it.

Take care,
Sherri