Skip to main content
Version: v0.1.0

Secure Messaging

HIPAA-compliant internal messaging system.

Overview​

A secure, WhatsApp-like messaging interface for communication between:

  • Provider <-> Provider (Consultations)
  • Provider <-> Staff (Coordination)
  • Provider <-> Patient (Secure Portal Messages)

Features​

  • End-to-End Encryption: Messages stored encrypted.
  • Attachments: Share labs, images, and documents securely.
  • Read Receipts: Know when messages are viewed.
  • Urgent Flags: Mark high-priority messages.

Architecture​

Data Model​

erDiagram
    MESSAGE {
        bigint id
        bigint sender_id
        bigint thread_id
        text content
        datetime created_at
    }
    THREAD {
        bigint id
        varchar type "DIRECT, GROUP"
    }
    THREAD_PARTICIPANT {
        bigint thread_id
        bigint user_id
        datetime last_read_at
    }
    MESSAGE ||--o{ THREAD : belongs
    THREAD ||--o{ THREAD_PARTICIPANT : contains

Real-Time Updates​

We use WebSockets (STOMP) for real-time delivery.

// Frontend subscription
client.subscribe('/user/topic/messages', (msg) => {
    const message = JSON.parse(msg.body);
    displayNotification(message);
});

Security​

  • Retention: Messages are retained for 6 years (configurable).
  • Access: Only participants in a thread can decrypt messages.
  • Audit: Reading a message creates an audit log entry.