IMPLEMENTAÇÃO DE UM BACKEND SEGURO E OTIMIZADO PARA SISTEMAS DE TELEMEDICINA

Área temática: Tecnologia e Saúde

Abstract

The advancement of digital technologies has enabled the consolidation of
telemedicine as an essential tool to expand access to healthcare, especially in underserved
areas. However, the success of such systems depends directly on the robustness and security
of the backend infrastructure that supports these applications. This study presents the
development and implementation of a secure and optimized backend for a telemedicine
application, focusing on data protection and system performance. The backend was built
using Node.js with the Express framework, and the database used was MongoDB. The
architecture followed a modular design pattern, with user and patient data schemas, secure
route definitions, and token-based authentication using JWT. Passwords were hashed using
bcrypt. A literature review highlighted key security challenges such as data protection in
transit and at rest, and compliance with LGPD and HIPAA. Best practices such as ABAC,
OAuth 2.0, and end-to-end encryption were also discussed. Functional tests using Postman
confirmed the successful implementation of all core features, including user registration,
login, patient creation, and restricted access to sensitive data. The results show the feasibility
of building a secure backend using open-source technologies and suggest future
improvements such as RBAC, encrypted data storage, audit trails, and the adoption of
blockchain for immutable medical records. The solution contributes to the growing need for
trustworthy and efficient digital health systems.