healthKERI

In May and June of 2024, I had the pleasure of collaborating with healthKERI, a startup revolutionizing healthcare data security through the Key Event Receipt Infrastructure (KERI) protocol. The company’s mission is to ensure secure, verifiable, and decentralized data exchanges for healthcare administrators managing sensitive patient information. My task was to design a Minimum Viable Product (MVP) that enables administrators to configure, monitor, and verify data pathways easily.

Healthcare administrators regularly exchange sensitive data with insurance providers, treatment centers, and pharmacies, yet existing authentication systems rely on phishable credentials and centralized authorities, making them vulnerable to cyber threats. To fully grasp the problem, I:

• Consulted with our CTO, Phil Feairheller and explored open-source documentation.
• Identified user pain points, including:
  • Complex multi-signature authentication workflows.
  • Lack of visibility into data transmission status.
  • Difficult setup processes for secure data pathways

I took a human-centered design approach to create an intuitive experience while ensuring security remained at the core. My process included:

• Mapping User Flows: I used swimlane diagrams to visualize authentication processes, from single-user sign-offs to multi-signature approvals.
• Enhancing Dashboard Usability: I designed an overview panel where administrators could monitor data transactions at a glance.
• Streamlining Setup & Validation: To simplify the configuration process, I introduced iconography, helper text, and step-by-step validation, reducing errors and confusion.

The MVP included:
- A fully interactive dashboard for tracking real-time data transactions.
- A structured search functionality for quick data retrieval.
- A profile page to manage administrator credentials.
- An intuitive setup flow for configuring secure data pathways.

Through this project, I successfully merged usability with security, making complex data exchanges easier to manage while reducing risks. This experience deepened my understanding of self-sovereign identity and reinforced the importance of balancing security with user experience in high-stakes industries like healthcare.