本論文的研究目的在於基於台灣全民健保IC卡的系統架構及運作特性，擴展出創新應用。主要貢獻有二：以IC卡狀態導向特性結合網路封包過濾的IC卡輔助防火牆以及利用現有健保專用網路建立緊急傳染疾病的控制、追蹤及監測機制。
首先，IC卡輔助防火牆為所有連接在健保專用網路的節點提供一個不需額外成本，具立即效益，且能與高速網路同步運作的防護方案，供健保簽約之醫療院所使用。此防火牆採用以卡片運作狀態對應的存取控制清單為封包過濾條件，可適用在企業內部網路及公共網際網路，又可與系統已安裝的其他防火牆及防毒軟體正常併行運作。此外，IC卡輔助防火牆可以結合節點電腦主機的時間戳記及卡片內對應的應用程式識別碼架構成為一個獨一無二的網路悠遊帳號紀錄，做為用戶端管理憑證。
其次，現有健保專用網路可建立新的緊急傳染疾病的控制、追蹤及監測機制。其特色在於線上監控，可提供一個快速反應、控制追蹤的管道，並強調管控緊急病例的二次感染及擴散。此系統適用範圍能擴增至疾病管制局所定義的各種緊急傳染疾病，例如嚴重急性呼吸道症候群 (SARS)或禽流感 (bird flu)等。此機制依據疾病管制局定義的篩選法則自動識別區分疑似病患，並對疑似病患資料上傳IC卡資料中心及發出警示訊息告知第一線護理人員。IC卡資料中心再利用收集上傳資料與其內部投保整合資料庫做後續感染來源及途徑資訊分析。
本論文內所研製在NHICS的創新應用，均是在不修改現有硬體架構的前提下，只利用對健保總局統一發行的控制軟體修改，可完全相容於醫療機構的醫院資訊系統。期望此創新應用在NHICS建設基礎上能更加發揮附加價值與潛力。

This research is based on National Health Insurance IC Card System (NHICS) to develop innovative applications. The major contributions are two folds: a Card-Assisted Firewall (CAF) and a mechanism for Emerging/notifiable infectious DIseases Control, Tracking and Surveillance (EDICTS).
CAF combines IC card state machine with packet-filter firewall to provide a cost-effective “once and forever” solution to protect the NHI VPN sites. Furthermore, it combines the local host’s time stamp and the identifier stored in card to construct a unique surfing log.
EDICTS is an on-line surveillance system that automatically monitors a variety of Center for Disease Control (CDC) defined Emerging/Notifiable Infectious Diseases (ENID), such as Severe Acute Respiratory Syndrome (SARS) and avian influenza (bird flu). EDICTS serves as a fast-response control and tracking channel for ENID and emphasizes on preventing secondary transmission from sporadic cases and common source outbreaks. EDICTS automatically identifies suspect cases by CDC defined rules. Once a suspect is detected, EDICTS uploads suspect data to IC card Data Center (IDC) immediately and gives an alarm to medical professionals in first-line. In addition, the sources and routes of infection could be traced by IDC.

[1] Wolfgang Rankl, Wolfgang Effing. (2003). Smart card handbook. 3rd ed. John Wiley & Sons, Ltd. 9-14
[2] Bureau of National Health Insurance. Current status (2005). Available at: http://www.nhi.gov.tw/ 00english/e_index.htm
[3] Kao-Ping Branch of National Health Insurance Bureau, (1999). A survey on the Satisfaction degree of Penghu Health IC Cards Report. 569~578.
[4] Ting-Wei Hou, (1999). The third stage report of Penghu Health IC Card Experiment.
[5] Ting-Wei Hou, Jyh-Win Huang, et al, (2001). The Outlines And Prospects of Pilot Taiwan Health IC Card Project -- The Penghu (Pescadores) Experiment, proceedings of 2001 International Conference on Mathematics and Engineering Techniques in Medicine and Biological Sciences, Las Vegas, Nevada, U.S.A, Jun 25-28, 2001, 215-221.
[6] Jyh-Win Huang, Ting-Wei Hou, Chien-Ming Chao, (2001). Cost-Effective Analysis of The Penghu (Pescadores) Healthcare IC Card Project, Compared with Healthcare Paper Card, Proceedings of 2001 Medical Informatics Symposium in Taiwan, Touyan, Taiwan, R.O.C, Oct 26-28, 2001 167-171.
[7] Jyh-Win Huang, Ting-Wei Hou, (2002). The Local Centralized Communication Architecture of Penghu Healthcare IC Card System, Proceedings of the 2nd Conference on Information Technology and Applications in Outlying Islands, Penghu, Taiwan, R.O.C, Jun 7-8, 2002 376-382.
[8] Jyh-Win Huang, Ting-Wei Hou, (2003). A study on the Endurance of Healthcare IC cards based on the Penghu (Pescadores) Experiment, Proceedings of the 2nd Conference on Information Technology and Applications in Outlying Islands, Penghu, Taiwan, R.O.C, Jun 15-16, 2003 217-223.
[9] Bureau of National Health Insurance, Request for proposal on National Health IC Card Project, (2000), Available at http://www.nhi.gov.tw/
[10] Bureau of National Health Insurance, Enrollment and constructed medical institutions status. (2001). Available at http://www.nhi.gov.tw/
[11] Po-Yuan Teng (2003). Simulating National Healthcare Cards by Java Cards, Master Thesis, Department of Engineering Science, National Cheng Kung University.
[12] Szu-Kai Huang (2003). Design and Implementation of a Java Processor Based Smart Card Reader, Master Thesis, Department of Engineering Science, National Cheng Kung University.
[13] Ming-Shen Tu (2004). A Simulation Environment for NHI IC Cards, Master Thesis, Department of Engineering Science, National Cheng Kung University.
[14] Jyh-Win Huang, Ting-Wei Hou, (2005). An IC Card-Certificated Secure Tunnel over NHI VPN Framework, Journal of Information Management, 12 (special issue), 91-110.
[15] Ting-Wei Hou , Jyh-Win Huang, Min-Shong Huang, (2001). The Design and Implementation of a Java-based Card Reader For IC Cards, workshop on the 21st Century Digital Life and Internet Technologies, May 17, 2001, 64 -170.
[16] Kuo-Yi Chen, Tzuo-Chun Lee, Ting-Wing Hou, Jyh-Win Huang, Min-Shong Huang, (2002). Design and Implementation of a Java Card Execution Environment, workshop on the 21st century Digital life and Internet Technologies, May 19, 2002, 151-162.
[17] C. Hare, K. Siyan. (1996), Internet Firewalls and Network Security. 2nd ed. New Riders Publishing, 128-129.
[18] Wolfgang Rankl, Wolfgang Effing. (2003) Smart card handbook. 3rd ed. Chap. 4.4. John Wiley & Sons, Ltd. 164-169.
[19] Cisco Networking Academy Program V 3.0 (2003). CCNA 2 : Router and Routing. Chap. 11. Access Control List.
[20] Bureau of National Health Insurance. (2000). Request for proposal on National Health IC Card Project. Available from: http://www.nhi.gov.tw/
[21] Ray Hunt. (1998). Internet/Intranet firewall security—policy, architecture and transaction services. Computer Communications 21. 1107-1123.
[22] International Organization for Standardization. ISO/IEC 7816 (1995). Identification cards - Integrated circuit(s) cards with contacts.
[23] Europay, MasterCard and Visa . EMVCo, (2000). Level 1 Terminal Type Approval Testing. EMV '96 Part 1 or Part 1 of Book 1 of EMV2000.
[24] Bureau of National Health Insurance. NHI IC card state machine (2005). Available at: http://www.nhi.gov.tw/
[25] Taiwan’s Bureau of National Health Insurance, (2003). To go all out fights SARS, Bimonthly of National Health Insurance, 44, 2-4.
[26] Abraham Silberschatz, Peter Baer Galvin, Greg Gagne, (2005). Operating System Concepts, 7thed, John Wiley & Sons Ltd., 54-55
[27] Fu-Chiang Tsui, Jeremy U. Espino, Virginia M. Dato, et al, (2003). Technical Description of RODS: A Real-time Public Health Surveillance System, J Am Med Inform Assoc. 10 (5) 399-408.
[28] Per H. Gesteland, Reed M. Gardner, et al, (2003). Automated Syndromic Surveillance for the 2002 Winter Olympics, J Am Med Inform Assoc. 10 (6) , 547-554.
[29] J.C. Benneyan, D. Satz, S.H. Flowers, (2000). Development of Web-Based Multifacility Healthcare Surveillance Information System, J. Health Inform Manag, 14, 19-26.
[30] Masashi Inoue, Shinsaku Hasegawa, Akihiko Suyama, Shunsuke Meshitsuka, (2003). Automated graphic image generation system for effective representation of infectious disease surveillance data, Comput Methods Programs Biomed, 72, 251-256.
[31] Kenneth D. Mandl, Marc Overhage, Michael M. Wagner, et al, (2004). Implementing Syndromic Surveillance: A Practical Guide Informed by the Early Experience, J Am Med Inform Assoc. 11 (2), 141-150.
[32] Monto AS, Gravenstein S, Elliott M, Colopy M, Schweinle J. (2000). Clinical signs and symptoms predicting influenza infection. Arch Intern Med 160, 3243-3247.
[33] M. Zambon, (1998). Sentinel surveillance of influenza in Europe 1997-1998, Euro Surveill 3 (3), 29-31.
[34] Okabe N, Yamashita K, Taniguchi K, Inouye S, (2000). Influenza surveillance system of Japan and acute encephalitis and encephalopathy in the influenza season, Pediatr Int. 42 (2), 187-191.
[35] Hazel J Clothier, James E Fielding, Heath A Kelly,(2005). An evaluation of the Australian Sentinel Practice Research Network (ASPREN) surveillance for influenza-like illness, Commun Dis Intell, 29 (3), 231-247.
[36] Barbara Dufour, (2000). Epidemiological surveillance of infectious diseases in France, INRA, EDP Sciences Vet. Res. 31, 169–185.
[37] Davies GR, Finch RG. (2003). Sales of over-the-counter remedies as an early warning system for winter bed crises. Clin Microbiol Infect 9 (8), 858-863.
[38] Ohshiro H, Kawamoto K, Nose T, (1996). Surveillance System of infectious diseases in Japan, J Epidemiol. 6 (3 suppl), 81-85.
[39] Miller B, Kassenborg H, Dunsmuir W, et al. (2004). Syndromic surveillance for influenza like illness in ambulatory care network, Emerg Infect Dis 10, 1806-1811.
[40] Morton, AP, M. Whitby, et al. (2004). Real-time syndrome surveillance in Ontario, Canada: the potential use of emergency departments and Telehealth, Eur J Emerg Med 11 (1), 3-11.
[41] Wirtz A, Andres M, Gottschalk R, Start S, Weber HJ, (2005). The role of public health service in prevention and control of infectious diseases in the Federal Republic of Germany. Tasks, structures and responsibilities-- an overview, Bundesgesundheitsblatt Gesundheitsforschung Gesundheitsschutz. 48 (9), 971-978.
[42] Chien-Tsai Liu, Pei-Tun Yang, Yu-Ting Yeh, Bin-Long Wang, (2006). The impacts of smart cards on hospital information systems—–An investigation of the first phase of the national health insurance smart card project in Taiwan, Int J Med Inform 75, 173-181.
[43] Taiwan’s Bureau of National Health Insurance, (2005). Card reader control software Windows version 1.51 download, Available at http://www.nhi.gov.tw/information/bulletin_file/668_CS151.ZIP.