Stav dette: Patient privacy, consent, and identity management in health information exchange