With regard to unauthorized access, you must determine how to allow authorized users access while blocking unauthorized ones through some form of authentication, such as a password. Retinal scans and thumbprint readers may not lend themselves to patients accessing the portal remotely with different devices and may be prohibitively expensive..