BS ISO 17090-1:2021
$189.07
Health informatics. Public key infrastructure – Overview of digital certificate services
Published By | Publication Date | Number of Pages |
BSI | 2021 | 48 |
This document defines the basic concepts underlying the use of digital certificates in healthcare and provides a scheme of interoperability requirements to establish a digital certificate-enabled secure communication of health information. It also identifies the major stakeholders who are communicating health-related information, as well as the main security services required for health communication where digital certificates can be required.
This document gives a brief introduction to public key cryptography and the basic components needed to deploy digital certificates in healthcare. It further introduces different types of digital certificates — identity certificates and associated attribute certificates for relying parties, self-signed certification authority (CA) certificates, and CA hierarchies and bridging structures.
PDF Catalog
PDF Pages | PDF Title |
---|---|
2 | National foreword |
7 | Foreword |
8 | Introduction |
11 | 1 Scope 2 Normative references 3 Terms and definitions 3.1 Healthcare context terms |
13 | 3.2 Security services terms |
16 | 3.3 Public key infrastructure related terms |
19 | 4 Abbreviations 5 Healthcare context 5.1 Certificate holders and relying parties in healthcare |
20 | 5.2 Examples of actors 5.2.1 Regulated health professional 5.2.2 Non-regulated health professional 5.2.3 Patient/consumer 5.2.4 Sponsored healthcare provider 5.2.5 Supporting organization employee 5.2.6 Healthcare organization |
21 | 5.2.7 Supporting organization 5.2.8 Devices 5.2.9 Applications 5.3 Applicability of digital certificates to healthcare |
22 | 6 Requirements for security services in healthcare applications 6.1 Healthcare characteristics 6.2 Digital certificate technical requirements in healthcare 6.2.1 General |
23 | 6.2.2 Authentication 6.2.3 Integrity 6.2.4 Confidentiality 6.2.5 Digital signature 6.2.6 Authorization 6.2.7 Access control |
24 | 6.3 Healthcare-specific needs and the separation of authentication from data encipherment 6.4 Health industry security management framework for digital certificates 6.5 Policy requirements for digital certificate issuance and use in healthcare 7 Public key cryptography 7.1 Symmetric vs. asymmetric cryptography |
25 | 7.2 Digital certificates 7.3 Digital signatures |
26 | 7.4 Protecting the private key |
27 | 8 Deploying digital certificates 8.1 Necessary components 8.1.1 General 8.1.2 CP 8.1.3 CPS 8.1.4 CA 8.1.5 RA |
28 | 8.2 Establishing identity using qualified certificates 8.3 Establishing speciality and roles using identity certificates |
29 | 8.4 Using attribute certificates for authorization and access control |
30 | 9 Interoperability requirements 9.1 Overview 9.2 Options for deploying healthcare digital certificates across jurisdictions 9.2.1 General 9.2.2 Option 1 — Single hierarchy of CAs 9.2.3 Option 2 — Relying party management of trust |
31 | 9.2.4 Option 3 — Cross-recognition 9.2.5 Option 4 — Cross-certification |
32 | 9.2.6 Option 5 — Bridge CA 9.3 Option usage |
33 | Annex A (informative) Scenarios for the use of digital certificates in healthcare |
46 | Bibliography |