A secure patient portal and telemedicine system integrating WebRTC video consultations and encrypted health record access.
Project Context
- Business Domain: Healthcare & Telehealth
- Project Context: Secure patient portal and telemedicine system for a regional healthcare network.
- Team Size: 6 engineers
- Period: Aug 2018 – July 2021
My Role
My role was as a Full-Stack Software Developer. I contributed to developing the REST API backend using ASP.NET, implementing OAuth2 and JWT authentication, creating the responsive Angular frontend layouts, and integrating WebRTC video streams.
The Challenge
The main objective was to design a secure platform allowing patients to schedule appointments, view medical lab results, and conduct remote video consultations with doctors while strictly adhering to data privacy and security standards.
Architecture
- Frontend: Angular frontend with responsive UI layouts for tablets and desktops.
- Backend: ASP.NET REST API.
- Database & Storage: Relational database with storage encryption applied.
- Authentication: OAuth2 and JWT token-based authentication.
- Video Service: WebRTC video streaming.
Technology Stack
Frontend
- Angular
- TypeScript
Backend
- ASP.NET Web API (ASP.NET Core)
- OAuth2 / JWT
Data
- Relational Database
- Cloud Storage
Infrastructure
- WebRTC Video Stream integration
- Secure key management
Key Engineering Challenges
Challenge 1: Data Encryption and Transit Security
- Challenge: Ensuring patient records, lab results, and personal information are secure in transit and at rest.
- Solution: Developed secure HTTPS pipelines for transit and applied encryption algorithms for data storage.
- Engineering Impact: Protected sensitive patient data from unauthorized interception or disclosure.
Challenge 2: Firewalls and WebRTC Video Performance
- Challenge: Guaranteeing low-latency video consultations across variable mobile devices and network routers.
- Solution: Integrated third-party WebRTC video streams and optimized signaling servers.
- Engineering Impact: Successfully hosted secure virtual consultations between doctors and patients.
Technical Decisions & Trade-offs
- OAuth2 and JWT for Identity Management: Selected token-based authentication to decouple authentication validation from backend endpoints. This increased client token management logic but ensured standardized API authorization.
Performance & Scalability
- Improved patient scheduling efficiency.
- Successfully hosted secure virtual consultations.
Security
- OpenID Connect / OAuth2 identity validation.
- Data transit and storage encryption.
- Security controls included OAuth2/OpenID Connect authentication, encrypted data transmission and storage, and secure access to sensitive patient information.
Outcome
The portal was deployed successfully, improving patient scheduling convenience and hosting secure virtual consultations.
Lessons Learned
- Implementing standardized OAuth2/JWT token-based authentication simplifies secure api integration for mobile and web clients.
- WebRTC requires reliable STUN/TURN servers to maintain high call success rates over restrictive network firewalls.
Similar case studies
High-Performance API Gateway for Logistics | ASP.NET Core YARP
Discover how an API Gateway was architected to handle thousands of updates, offline syncing, and real-time alerts for enterprise logistics.
ASP.NET Core + SQL Server Relational Database Architecture | Rajdip Khavad
Learn how traditional cemetery operations and complex historical record mapping were digitized using a secure ASP.NET Core and SQL Server relational database architecture.
About Rajdip Khavad
Rajdip Khavad is an Angular and ASP.NET Core/.NET developer specializing in enterprise applications, APIs, application modernization and performance-focused engineering. On this project, his focus was identity provider integration, data encryption and WebRTC signaling setup.