Data Management Plan - Sidduri2025/RehabEdge GitHub Wiki
Summary of Data to be Stored
1. Doctor Information
Doctor ID: A unique identifier for each doctor.
Name: The doctor’s full name.
Email: The doctor’s official email address.
Specialization: The doctor’s area of expertise (e.g., Orthopedic, Neurological).
Experience: Number of years of practice.
Password: Encrypted login password.
Availability: Doctor’s schedule for patient consultations or remote sessions.
2. Patient Information
Patient ID: A unique identifier for each patient.
Name: The full name of the patient.
Email: The email address of the patient.
Contact: Patient’s phone number.
Date of Birth: For record and treatment personalization.
Assigned Doctor ID: The identifier of the doctor assigned to this patient.
Reminder Preferences: The time or frequency for receiving exercise reminders.
Password: Encrypted login password.
3. Exercise Details
Exercise ID: A unique identifier for each exercise.
Name: The name of the exercise.
Description: A brief explanation of the exercise.
Target Body Part: The body part the exercise focuses on.
Difficulty Level: The exercise difficulty (e.g., Easy, Moderate, Hard).
AI Pose Model Reference: The AI model reference used for posture analysis.
4. Session Data
Session ID: A unique identifier for each Exercise session.
Patient ID: Identifier for the patient performing the session.
Doctor ID: Identifier for the supervising doctor.
Date & Time: When the session took place.
Duration: The total duration of the session.
AI Accuracy Score: The AI-detected accuracy percentage of posture.
Feedback Notes: AI-generated or doctor-entered feedback.
Video Link: Optional link to recorded or live session footage.
5. Reminder / Notification Details
Notification ID: A unique identifier for each reminder or notification.
Patient ID: The identifier for the patient receiving the notification.
Message: The content of the reminder or alert.
Type: The type of notification (e.g., Mobile App Notification, Email).
Status: Whether the reminder was sent or pending.
Scheduled Time: The time the notification is to be delivered.
Data Management
Data Security Plans
Initial Plans to Secure Data
1. Access Restrictions
User Roles: Implement Role-Based Access Control (RBAC) to ensure that users can access only the data necessary for their roles:
Admin: Full access to manage users, doctors, and system settings.
Doctor: Access to patient details, Exercise sessions, and reports.
Patient: Access to personal data, assigned exercises, and AI feedback.
Authentication: Require strong authentication (password policy, optional 2FA) for login.
Session Control: Auto log-out after inactivity and session token validation.
2. Data Encryption
At Rest: Encrypt sensitive fields like passwords, medical feedback, and contact information using AES-256 encryption.
In Transit: All communication between mobile/web apps and the backend will use HTTPS (SSL/TLS) to prevent interception.
3. Data Backup and Recovery:
Implement a data backup strategy to ensure that all data is regularly backed up and can be restored in case of data loss or a security breach.
Mapping of functional requirements to data storage
1. Patient receives daily Exercise reminders
Related Data Storage: Notification Table
Description: Stores reminder time, message, and status to ensure timely mobile alerts for patients.
2. Doctor views patient exercise history
Related Data Storage: Session Table
Description: Maintains records of past exercises, AI feedback, and progress scores for each patient.
3. Patients perform exercises and get AI posture feedback
Related Data Storage: Exercise Table
Description: Stores exercise details and posture accuracy results generated by the AI for performance tracking and improvement.
4. User authentication and access
Related Data Storage: Patient Table, Doctor Table
Description: Stores secure login credentials for patients, doctors, and administrators, using encryption for authentication.
5. Progress tracking and reporting
Related Data Storage: Session Table
Description: Stores data on exercise sessions, accuracy, and improvement metrics to generate weekly summaries and reports.