Desarrollo de una aplicación web para la gestión de citas médicas e historia clínica en el Centro Médico de Terapias Alternativas, Cosmetología, Fisioterapia y SPA

Abstract

In this thesis work, the results of a research conducted at the Medical Center of Alternative Therapies, Cosmetology, Physiotherapy and Spa are presented. The general objective of the research was to implement a web application for managing medical appointments and patient medical records at the Medical Center. We applied acquired knowledge, methods such as analytical-synthetic and inductive, and techniques including interviews, document review, testing, and surveys for the development of the study. As a result, we present a solution composed of 6 modules covering medical appointments, administrative staff management, patient management, clinical history management, external consultation management, and reports. The system constitutes a web application using the Spring framework and incorporates other technologies within the Spring Framework such as Spring MVC, Spring Data JPA, and Spring Security. Functionality-level security was established, ensuring access to system operations based on the role-functionality relationship. After the evaluation according to ISO 27001 standard, it was concluded that the implemented solution has an integrity level of 2 with a 55.35% score, while also identifying possibilities for improvement in future developments and evolution of the web system. It is recommended to implement an evolutionary version of the system that addresses the identified security vulnerabilities.