The document describes a proposed Catalan digital health ecosystem that would provide a secure instant messaging standard for healthcare professionals. The system would use multi-level security including SSL encryption, OTR encryption for messages, and LDAP for access control. Messages would remain within the organization's servers and screenshots would be prohibited. The open-source XMPP protocol would be used and customized plugins could be created and installed. Records of all conversations would be stored on the servers along with metadata. The system is intended to improve care coordination and reduce wait times for patients while facilitating knowledge sharing between hospitals in a simple and controlled way.

1. Catalan Digital Health Ecosystem

5. INSTANT MESSAGING STANDARD

7. SAFE• Multi-level system security:
• Channel (SSL with certificates).
• Messages (OTR).
• Access (LDAP).
Files remain in the server and screenshots may
not be taken, thus avoiding information leaks.

8. PRIVATE• Service and servers are hosted and run by the
organisation.
• Messages remain within the administrator’s
systems.
• Only users in the directory (LDAP) are granted
access.

9. OPENSOURCE
XMPP open protocol and development based on open extensions.

10. EXPANDABLE
• Server Plugins (safety).
• Client Plugins (circuits/chats).
• Generic plugin catalogue.
• Custom-made developments.

11. TRACEABLE
• Records of all conversations stored in the server.
• Saves information on the conversation (time, duration,
participants) or regarding their content (the messages).

12. HEALTHThe original specifications are intended to
cover the needs of this sector.

13. LDAP Server
(identity management)
Instant Messaging Server
Authentication
Professional
directory
Professional1
Professional2

15. ECOSYSTEM HEALTH

16. PATIENT
The patients receive better care and with
reduced waiting times:
• Coordination between hospitals.
• Instant appointments.
• Diagnosis confirmation.

17. HOSPITALS
• Improved communication between hospitals.
• Team coordination.
• Controlled channel where you can access a set
of useful contacts.
• Share knowledge in a simple, intuitive and swift
manner.

18. DATA PROTECTION
• System controlled by the organisation/hospital.
• Implementation of all confidentiality and privacy requirements.

19. INVESTMENT
• Free form.
• Commercialisation of plugins based on installation and
user traffic.
• Adaptable implementation based on organisation size.
• Costs adapted to real needs.

21. THANKS
Alex Ugartondo
alex.ugartondo@in2.es
902 88 17 76