Another Great health occupational Article
e-Identity and data security in healthcare

Digital certificate technology has a decidedly patchy healthcare track record. Can a new open-source model avoid the mistakes and deliver affordable, practical security?

The digital certificate was expected to allow better quality healthcare to be delivered faster and at lower cost by enabling the secure networked exchange and storage of patient and clinical data.

But it turned out to be difficult and costly to implement and the proprietary nature of many certificate solutions meant prospects for the important goal of interoperability looked bleak. As the recession bit, vendors found healthcare was among the first sectors to put certificate rollouts on hold.

So what went wrong?

I believe the basic proposition was flawed. Digital certificates are created and managed by highly complex public key infrastructure (PKI) software. The major certificate PKIs were built for the needs of global commerce - a customer base flush with cash to spend on high-profile IT projects and with well-resourced internal IT departments. The contrast with healthcare could not be starker.

It was therefore no surprise that most certificate deployments in the UK public sector took place with the help of managed service providers. In theory these third parties bear the cost of buying and operating the PKI and pass on the economies of scale. In reality, their pricing is dictated by PKI vendors anxious to recover substantial development, marketing and sales costs.

But high up-front charges are not the only problem. Most proprietary PKI needs special software to act as a kind of middleware between certificates and desktop applications. Installation and maintenance of this means further cost. Often, still more budget is sucked up by the need to integrate new and existing applications with the digital certificate service.
Finally, managed service customers have found themselves vulnerable to the fluctuating fortunes of both service providers and PKI vendors. They can be left high and dry as a result of commercial collapse or a strategic withdrawal from a particular market.

None of this means PKI is fundamentally inappropriate for healthcare. But it does, in my view, mean the established delivery mechanism is wrong.

A radical new model retains the managed services provider, but instead of being proprietary, its PKI is built entirely from industry standards-based Open Source code. The service is also configured to deliver exactly the functionality required by healthcare and to operate in a way that conforms to health sector guidelines or local requirements. It works directly with existing, unmodified applications to encrypt and sign, using no special client-side software.

Open source has its critics -- almost all of them with proprietary positions to defend -- but it is very rapidly gaining acceptance worldwide and is proving highly robust. A recent Forrester report found that 45% of sampled organisations where using Open Source in mission critical applications. The core software used by the new model, Open XPKI, is a development of teams in Italy and Germany with EU-wide governmental support. The four other main technology components: the operating system Linux; the directory service Open LDAP; the database MySQL, and the cryptographic library Open SSL, are all widely respected, deployed and proven by international business and governments.

The new PKI model starts from a uniquely strong foundation because there are no software development costs to recover. Charges therefore need only reflect the cost of service provision. Unlimited numbers of digital certificates can be issued with customers paying a simple service fee. That means a 1,000 seat project will typically cost 60% less than the old model - and it becomes cheaper still in real terms for even larger roll-outs. The new model positively encourages bold certificate deployments.

The new model is strong too in the area of compatibility. It recognises that healthcare has a huge financial and training investment in mainstream third party software and so works directly with it, enabling a wide range of secure healthcare applications to be deployed quickly and cost-effectively. Typical examples include any kind of messaging application, including electronic links with partner organisations like suppliers and other public sector agencies.

Another major plus of the new paradigm is its trust model (the hierarchy of people and organisations that make a digital certificate inherently trust-worthy). Some earlier managed services have been inflexible, insisting for example on a face-to-face verification process coupled to documentary evidence of identity. This added both delays and yet more cost.
Under the new model responsibility for verifying the identity of would-be certificate holders rests with certificate managers appointed within user organisations. They use local resources to verify applicants, and then visit a dedicated Website to order certificates.

Early experience with the new model has been encouraging. Users have found their expectations of far lower costs to be realised. Delivered solutions have proved stable, robust, and easily integrated with existing systems.

About the Author

Jonathan Gay BA(hons) CISA MBCS, is an IS Security professional specialising in identity management and Public Key Infrastructure (PKI) related matters. Jonathan works for Diginus Ltd the e-identity solutions company.

You can contact Jonathan via the Diginus Ltd web site www.diginus.com

Thoughts about health occupational
Professional Hypnosis Mp3s By Email.

Hypnosis expert Richard Blumenthal, Ms, Ncc, Lmhc has created hypnosis mp3s via email. Weight, smoking, health. 39 titles.
Professional Hypnosis Mp3s By Email.

Getting Whole, Getting Well.

holistic health eBook.
Getting Whole, Getting Well.

Secrets Of Authentic Tai Chi.

Discover the ancient exercise that dramatically improve your health, boost your energy and keeps you fit and young.
Secrets Of Authentic Tai Chi.

The Complete Guide To Green Tea.

Discover an Amazing and Powerful Key to Long Life and Good Health!
The Complete Guide To Green Tea.

No More Hemorrhoids.

Healthcare.
No More Hemorrhoids.

Featured health occupational Items
Blue Lizard Australian Suncream Lotion Spf 30+ Face 5oz

No Details Available

Price: 11.26

Ezo Cushion Upper Heavy 12ct

"Denture Cushions Uses Temporary aid to hold loose dentures. Directions Rinse the EZO cushion a few seconds in warm water to soften it. Hold dentures with teeth down and back part up. Center EZO cushion on dentures and press into groove. If necessary, trim EZO with scissors to fit denture. Place dentures in mouth and bite firmly. Hold for about 2 minutes. You will feel the cushion conform to your gums. To clean: Lift cushion from denture, rinse in cold water, then rinse in warm water, return to denture. Repeat instructions on placing dentures in mouth after each cleaning. Warnings Use not to exceed 6 weeks duration. For temporary use until a dentist can be seen. EZO Cushions should be changed daily. Use only 1 cushion at a time on each denture. EZO cushions should be used only with full upper dentures. Consult your dentist: Use of ill-fitting dentures may seriously impair health, causing permanent bone loss and irritation. Active Ingredients Pure Cotton Flannel; Paraffin Wax; Corn Oil; Food Color """

Price: 2.69

Lady Speed Stick Anti Perspirant/Deodorant Invisible Dry Caribbean Cool 2.3oz

"Active ingredients Aluminum Zirconium Tetrachlorohydrex GLY 15.4% Ingredients Cyclopentasiloxane , Stearyl Alcohol , PPG-14 Butyl Ether , Phenyl Trimethicone , Hydrogenated Castor Oil , PEG-8 Distearate , Fragrance , Corn Starch , Polysaccharides Instructions Apply to underarms only Warnings For external use only. Do not use on broken skin. Ask a doctor before use if you have kidney disease. Stop use if rash or irritation occurs. Keep away from children. If swallowed, get medical help or contact a Poison Control Center right away."

Price: 2.43

Murine Tears Plus Eye Drop .5oz

"Redness Reliever, Eye Drops Uses For the temporary relief or prevention of further discomfort due to minor eye irritations and symptoms related to dry eyes plus removal of redness. Directions Instill 1 or 2 drops in the affected eye(s) up to 4 times daily. Warnings To avoid contamination, do not touch tip of container to any surface. Replace cap after using. If you experience eye pain, changes in vision, continued redness or irritation of the eye, or if the condition worsens or persists for more than 72 hours, discontinue use and consult a doctor. If you have glaucoma, do not use this product except under the advice and supervision of a doctor. Overuse of this product may produce increased redness of the eye. If solution changes color or becomes cloudy, do not use. Keep this and all drugs out of the reach of children. In case of accidental ingestion, seek professional assistance or contact a Poison Control Center immediately. Active Ingredients Polyvinyl Alcohol 0.5%; Povidone 0.6%; Tetrahydrozoline Hydrochloride 0.05% Inactive Ingredients Benzalkonium Chloride; Dextrose; Disodium Edetate; Potassium Chloride; Purified Water; Sodium Bicarbonate; Sodium Chloride; Sodium Citrate; Sodium Phosphate Mono-and Dibasic)"

Price: 3.79

Foamy Shave Regular Cream 11oz

"Shaving Cream Uses Provides a thick, extra rich, creamy lather for a close, comfortable shave. Directions Shake can before use. Hold can upright. Warnings AVOID SPRAYING TOWARD OPEN FLAME. CONTENTS UNDER PRESSURE. KEEP OUT OF REACH OF CHILDREN. USE ONLY AS DIRECTED. Active Ingredients Water; Stearic Acid; Triethanolamine; Isobutane; Laureth-23; Sodium Lauryl Sulfate; Propane; Fragrance; BHT; Butane "

Price: 1.67

Current health occupational News
Scholarship Opportunity for Students in Occupational Health and Safety Programs

Tue, 14 Nov 2006 02:34:35 GMT
scholarships for students in occupational health and safety programs …

Holzer Clinic Receives AAAHC Accreditation

Thu, 18 Dec 2008 11:31:35 GMT
Holzer Clinic has achieved accreditation by the Accreditation Association for Ambulatory Health Care .

Covidien Launches RapidVac Smoke Evacuator

Thu, 18 Dec 2008 10:41:21 GMT
Covidien , a world leader in advanced energy-based surgical systems, today announced the global launch of the RapidVac Smoke Evacuator System - a powerful, efficient device that quietly filters airborne ...

home health