To correct the problem, Concentra converted the Web application to a thin-client application using Citrix Systems' MetaFrame middleware. This way, the server would execute the client code rather than push it to the mobile devices. "It centralizes the application in the data center so that it's in one place instead of on every desktop and handheld," Wilson says. Only the screens and user input and output are sent between the Citrix server and the handheld, so it uses less bandwidth and requires upgrades only at the server.

The new applications for physical therapists and physicians now run in most of Concentra's 250 clinics across the country. Some 1,000 physicians and physical and occupational therapists use the applications in lieu of voice dictation and handwritten notes to document patient visits.

When a patient arrives for an appointment, for instance, his or her name appears on the doctor's handheld computer. The physician can pull up information about the reason for the visit (say, an injury from a fall off a forklift) and the patient's previous visit and treatment. That information is fed from a Sybase database that handles patient data.

The browser applications, collectively called ChartSource, run on a combination of Windows 2000 and Citrix MetaFrame NT servers in Concentra's Addison data center. Concentra's clinics have 56-Kbps frame relay connections to the data center. The MetaFrame thin client software helps minimize Concentra's frame relay WAN costs because it doesn't use much bandwidth, Wilson says.

Indeed, Concentra's wireless applications already have paid for themselves: Wilson says the company is saving about $3 million a year in transcription costs for physicians, which is about what it cost to develop the custom wireless applications.

Even with the architecture improvements, therapists notice slowdowns and screen delays with the ChartSource Therapy application during peak periods at the clinics. Concentra's IT team is working with outside contractors to help determine the cause, Wilson says, which he believes is a load problem with the server or wired network, not the wireless connection. Enterasys RoamAbout wireless access devices run in the clinics.

Wilson and his IT group, meanwhile, are already testing the next phase of the wireless project, incorporating the patient checkout process. Physicians and physical therapists will use the application to record their recommendations for a patient's treatment after a workplace injury, along with a recommendation for when he or she should return to work. Today, those recommendations are recorded on paper, and an administrative assistant enters the therapist's notes into Concentra's homegrown practice management system, which shares a database with the wireless applications. "They will be able to document when the next appointment date should be and what procedures should be performed," Wilson says. Billing will be automatically generated, too.

All of Concentra's applications, including the wireless ones, are integrated using the company's Sybase database.

Concentra, like other health care organizations, is under pressure to keep patient data confidential to comply with the federal government's Health Insurance Portability and Accountability Act (HIPAA). Security hasn't been compromised on Concentra's wireless network so far, but Wilson says he anxiously awaits Enterasys' newest encryption technology, which works around the WEP (Wired Equivalent Privacy)'s weakest link: its vulnerable session key.

"One of the weaknesses in Web encryption is that the session key is broadcast out, and someone could capture and decrypt it," he says. Enterasys' new encryption feature, called rapid rekeying, automatically changes the key every 10 minutes, so a stolen key expires before significant damage can be done. Enterasys uses 128-bit encryption.