NDLI: Exchange of patient records-prototype implementation of a security attributes service in X.500

Please wait, while we are loading the content...

Support for the file system security requirements of computational E-mail systems

Secure wireless LANs

The design and implementation of tripwire: a file system integrity checker

Exchange of patient records-prototype implementation of a security attributes service in X.500

A process-oriented methodology for assessing and improving software trustworthiness

Towards acceptable key escrow systems

Protocol failure in the escrowed encryption standard

Secure agreement protocols: reliable and atomic group multicast in rampart

On key distribution via true broadcasting

Conditionally secure secret sharing schemes with disenrollment capability

Meta-ElGamal signature schemes

Anonymous credit cards

An efficient multiversion algorithm for secure servicing of transaction reads

A temporal authorization model

Propagation of authorizations in distributed database systems

The design of substitution-permutation networks resistant to differential and linear cryptanalysis

Information leakage of boolean functions and its relationship to other cryptographic criteria

Authentication codes that are r-fold secure against spoofing

Endorsements, licensing, and insurance for distributed system services

New protocols for third-party-based authentication and secure broadcast

How to simultaneously exchange secrets by general assumptions

A key distribution method for object-based protection

How to break Gifford's cipher (extended abstract)

Parallel collision search with application to hash functions and discrete logarithms

Application access control at network level

Network security probe

Security modelling for organisations

“Mainstreaming” automated information systems security engineering (a case study in security run amok)

The compatibility of policies

An entropy conservation law for testing the completeness of covert channel analysis

Prerequisite confidentiality

Exchange of patient records-prototype implementation of a security attributes service in X.500

Content Provider	ACM Digital Library
Author	Jurečič, Marjan Bunz, Herbert
Abstract	In Europe, the use of computers in health care industry has increased rapidly in recent years. This increase, however, has been accomplished with research efforts in the area of privacy and confidentiality of personal data. In the German legislation, protection of personal data is guaranteed by the constitution, granting a general right to privacy. This constitutional right has been amended by the German Central Court (Bundesverfassungsgericht). It says that each individual has the right to decide to whom and where he wants to give personal information.In the US, similar problems of granting privacy and confidentiality of sensitive medical data will emerge. The Clinton administration's health plan has led to a discussion on privacy and data protection in the US. If that health plan is realised, it will lead to an exchange of personal medical data over data-highways.In this paper, we will describe a prototype implementation of a secure hospital environment offering the basic functionality that is necessary for secure medical information storage and exchange inside a hospital computer network and the secure exchange of medical information over publicly accessible networks between different security domains. The functionality and security requirements have been derived in cooperation with a large university hospital in Germany, the University Hospital Freiburg. The relevant technical solution has been developed jointly by the IBM European Networking Center in Heidelberg and the Institute for Computing and Society University Freiburg. This paper will focus on the technical solutions to provide the needed functionality.The main topics of this paper will be the security services granted, especially the role-based Access Control as well as the storage and retrieval of the Privilege Attributes (ECMA-138) for the various users. We shall describe how the Directory Service (X.500) is used for storage, retrieval and management of organizational structure information as well as for the dynamic handling of user roles and Privilege Attributes Certificates according to the suggestions of ECMA-138.As a result, it can be shown that the security services and architectures currently under standardization are capable of providing sufficient security mechanisms. They also provide the flexibility necessary for the adoption to environments that deal with highly sensitive data even in a distributed applications environment.
Starting Page	30
Ending Page	38
Page Count	9
File Format	PDF
ISBN	0897917324
DOI	10.1145/191177.191185
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	1994-11-02
Publisher Place	New York
Access Restriction	Subscribed
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

An X.500 prototype to support integrated network management

A flexible approach for electronic medical records exchange

A prototype implementation for dynamically configuring node-node security associations using a keying server and the internet key exchange (2003).

An implementation of MLS on a network of workstations using X.500/509

Improving the exchange of lessons learned in security incident reports: case studies in the privacy of electronic patient records

Improving the Exchange of Lessons Learned in Security Incident Reports: Case Studies in the Privacy of Electronic Patient Records

Implementing a Prototype of the Security Framework for Distributed (2003)

SIP intrusion detection and prevention: recommendations and prototype implementation

Security in the dutch electronic patient record system

Exchange of patient records-prototype implementation of a security attributes service in X.500

Similar Documents

An X.500 prototype to support integrated network management

A flexible approach for electronic medical records exchange

A prototype implementation for dynamically configuring node-node security associations using a keying server and the internet key exchange (2003).

An implementation of MLS on a network of workstations using X.500/509

Improving the exchange of lessons learned in security incident reports: case studies in the privacy of electronic patient records

Improving the Exchange of Lessons Learned in Security Incident Reports: Case Studies in the Privacy of Electronic Patient Records

Implementing a Prototype of the Security Framework for Distributed (2003)

SIP intrusion detection and prevention: recommendations and prototype implementation

Security in the dutch electronic patient record system

Exchange of patient records-prototype implementation of a security attributes service in X.500