• DD ISO/TS 17090-1:2002

    Superseded A superseded Standard is one, which is fully replaced by another Standard, which is a new edition of the same Standard.

    Health informatics. Public key infrastructure Framework and overview

    Available format(s):  Hardcopy, PDF

    Superseded date:  30-05-2008

    Language(s):  English

    Published date:  07-11-2002

    Publisher:  British Standards Institution

    Add To Cart

    Table of Contents - (Show below) - (Hide below)

    Foreword
    Introduction
    1 Scope
    2 Normative references
    3 Terms and definitions
      3.1 Healthcare context terms
      3.2 Security services terms
      3.3 Public key infrastructure related terms
    4 Abbreviations
    5 Healthcare context
      5.1 Health PKI classes of actors
      5.2 Examples of actors
      5.3 Applicability of PKI to healthcare
    6 Requirements for security services in healthcare applications
      6.1 Healthcare characteristics
      6.2 Healthcare PKI technical requirements
      6.3 Separation of authentication from encipherment
      6.4 Health industry PKI security management framework
      6.5 Policy requirements for a healthcare PKI
    7 Public key cryptography
      7.1 Symmetric vs. asymmetric cryptography
      7.2 Digital certificates
      7.3 Digital signatures
      7.4 Protecting the private key
    8 PKI
      8.1 Components of a PKI
      8.2 Establishing identity using qualified certificates
      8.3 Establishing speciality and roles using identity certificates
      8.4 Using attribute certificates for authorization and
          access control
    9 Interoperability requirements
      9.1 Overview
      9.2 Options for setting up a healthcare PKI across
          jurisdictions
      9.3 Option usage
    Annex A (informative) Scenarios for the use of PKI in healthcare
    Bibliography

    Abstract - (Show below) - (Hide below)

    Specifies the basic concepts of a healthcare public key infrastructure (PKI) and provides a scheme of interoperability requirements to establish a PKI enabled secure communication of health information.

    General Product Information - (Show below) - (Hide below)

    Committee IST/35
    Document Type Standard
    Publisher British Standards Institution
    Status Superseded
    Superseded By

    Standards Referencing This Book - (Show below) - (Hide below)

    ISO/IEC TR 14516:2002 Information technology Security techniques Guidelines for the use and management of Trusted Third Party services
    ISO/IEC 15945:2002 Information technology — Security techniques — Specification of TTP services to support the application of digital signatures
    ISO/IEC 10181-1:1996 Information technology Open Systems Interconnection Security frameworks for open systems: Overview
    ISO/IEC 9594-8:2017 Information technology Open Systems Interconnection The Directory Part 8: Public-key and attribute certificate frameworks
    ISO 7498-2:1989 Information processing systems Open Systems Interconnection Basic Reference Model Part 2: Security Architecture
    ISO/IEC 2382-8:1998 Information technology Vocabulary Part 8: Security
    ISO/IEC 17799:2005 Information technology Security techniques Code of practice for information security management
    ISO/IEC 8824-1:2015 Information technology Abstract Syntax Notation One (ASN.1): Specification of basic notation Part 1:
    ENV 13608-1:2000 HEALTH INFORMATICS - SECURITY FOR HEALTHCARE COMMUNICATION - PART 1: CONCEPTS AND TERMINOLOGY
    ISO/TS 17090-2:2002 Health informatics Public key infrastructure Part 2: Certificate profile
    ISO/TS 17090-3:2002 Health informatics Public key infrastructure Part 3: Policy management of certification authority
    ISO/IEC TR 13335-1:1996 Information technology — Guidelines for the management of IT Security — Part 1: Concepts and models for IT Security
    • Access your standards online with a subscription

      Features

      • Simple online access to standards, technical information and regulations
      • Critical updates of standards and customisable alerts and notifications
      • Multi - user online standards collection: secure, flexibile and cost effective