Patient generates new pair of asymmetric keys

D.1 Patient $\to$ USB—Patient : DID

D.2 USB—Patient $\to$ Patient : k_b

Patient requests attributes for patient identified by k₀

D.3 Patient $\to$ HAP : k₀, DID, k_b, $a_1,\cdots ,a_n$

Patient proves his ownership of public keys k₀ and k_b via a challenge/response

D.4 HAP $\to$ Patient : k₀, N_p

D.5 Patient $\to$ USB—Patient : HAP, H(k₀, N_p)

D.6 USB—Patient $\to$ Patient : ${\left\{H\left(k_0,N_p\right)\right\}}_{k_0^{-1}}$

D.7 Patient $\to$ USB—Patient : $DID,H\left(k_b,N_p\right)$

D.8 USB—Patient $\to$ Patient : ${\left\{H\left(k_b,N_p\right)\right\}}_{k_b^{-1}}$

D.9 Patient $\to$ HAP : ${\left\{H\left(k_0,N_p\right)\right\}}_{k_0^{-1}},{\left\{H\left(k_b,N_p\right)\right\}}_{k_b^{-1}}$

HAP saves the link between DID and kb in Indy

D.10 HAP $\to$ Indy : DID, k_b, ${\left\{H\left(DID,k_b\right)\right\}}_{k_p^{-1}}$

HAP sends the EMR to patient in a protected form

D.11 HAP $\to$ Patient : $\underset{M}{\underbrace{DID,{\left\{EMR\right\}}_k}},{\left\{H\left(M\right)\right\}}_{k_p^{-1}},{\left\{k\right\}}_{k_0}$

Patient saves the EMR in his wallet

D.12 Patient $\to$ Wallet : $\underset{M}{\underbrace{DID,{\left\{EMR\right\}}_k}},{\left\{H\left(M\right)\right\}}_{k_p^{-1}},{\left\{k\right\}}_{k_0}$