CEN/TC 251 N 95-284

Health Informatics - Security requirements for intermittently connected devices

Scope

Intermittently connected devices such as patient cards may carry important clinical information as well as administrative data of importance to healthcare delivery. Detailed requirements for the following security services for ICD-systems should be defined: Data Integrity Protection, Data Origin and Entity Authentication, Access Control, Confidentiality. The work should define security requirements on the ICD-interchange interface between an application system and an ICD-System. However, the overall security requirements can only be met if certain requirements on ICDs can be defined.