Archives
- ► 2012 (8)
- ► 2011 (157)
- ► 2010 (174)
- ► 2009 (12)
Which topics would you like us to cover more?
Latest comments
- How to reset you Kindle
3, eve...
Thanks for this article and the related "Inside th...
By H K - How to reset you Kindle
3, eve...
How do you drain power on the board? I dont have r...
By Grace - How to reset you Kindle
3, eve...
You're welcome!
By Bas - How to reset you Kindle
3, eve...
Thanks man....removing the battery worked like a c...
By DaveMan - nHapi
example
Hi Slypete, Thank you for your comment. This way w...
By Bas - nHapi
example
Hello, Employing .Net dynamics, one can implement ...
By slypete - Implementing MLLP in C#
Hi Mayura, I'm not sure I understand your question...
By Bas - Implementing MLLP in C#
I have used SSL stream to secure the MLLP transact...
By Mayura
Latest tweets
Architecture, security and coding HL7 and
security| HL7 and security |
| Written by Division by Zero |
| Tuesday, 18 January 2011 14:25 |
|
HL7 transports a lot of (privacy) sensitive data. As a security minded person, this is a real issue. Most of the data transmits on a corporate network, but the basis of HL7 with MLLP is a plain text protocol. Anyone can sniff the data and get sensitive information. Luckily I’m not the only one thinking about these security issues. The organization behind HL7 offers guidance on how to identify and solve security problems. They are using the Risk Management Lifecycle to do this. I hope that any organization is aware of these issues and draw up some plans to mitigate any security issue they possibly can identify. Besides the process of identifying security issues, there is not a lot of explanation on how to solve these issues on a technical level. There are multiple ways to deal with security in communication. Two good ways are offered. The first one is to use SSL to encrypt communication between applications. This way it will be harder to sniff the HL7 network traffic. Besides making it harder to steal information, unauthorized communication must be addressed. Some form of authentication and authorization should be applied on the HL7 services. One way to implement this is using EDI (Electronic Data Interchange). Here are some resources on helping you to identify security risks:
This document will help you with technical implications of the identified risks: |
Only put off until tomorrow what you are willing to die having left undone. - Pablo Picasso
