#cryptographic techniques

ISO 27001 Annex : A.10 Cryptography in this article explaining Cryptographic controls, Policy on the Utilization of Cryptographic Controls & Key Management.

ISO 27001 Annex : A.10 Cryptography in this article explaining Cryptographic controls, Policy on the Utilization of Cryptographic Controls & Key Management.

ISO 27001 Annex : A.8.3 Media Handling Its objective is to Stop unauthorized release, alteration, deletion, or destruction of information contained in the media.

ISO 27001 Annex : A.8.3 Media Handling Its objective is to Stop unauthorized release, alteration, deletion, or destruction of information contained in the media.

ISO 27001 Annex : A.6.2 Mobile Devices and Teleworking its objective is to ensure the security of teleworking and the use of mobile devices.

OPTIMAL CRYPTOGRAPHIC TECHNIQUES ABSTRACTThe age of information is also the age of digital information assets, where the professional programmer has to deal with cryptography. This work presents the theory, source code, and implementation for variable key size RSA encryption/decryption, digital signing, multi precision library, Diffie-Hellman key exchange, entropy collection, pseudo random number…

Blockchain Technology in Healthcare

Health information technology and information security specialists are hearing a lot about blockchain these days. “It’s the answer to interoperability.” And “the technology can solve healthcare’s looming security problems.” But what the heck is blockchain, anyway? The so-called digital ledger technology was developed in 2008 by Satoshi Nakamoto, a possibly pseudonymous person (or perhaps multiple people) who designed it as the underpinning for the exchange of the digital cryptocurrency known as Bitcoin.

Blockchain transactions are logged publicly and in chronological order. The database shows an ever-expanding list of ordered "blocks," each time-stamped and connected to the block that came before it — thereby constituting a blockchain.Crucially, each block cannot be changed, deleted or otherwise modified: it's an indelible record that a given transaction occurred. That’s exactly what has many in healthcare excited about blockchain's potential for data security. Its open and decentralized nature could lend itself well to managing health records and proving identity. Rather than a central database, the blockchain record can be distributed and shared across networks, with credentialed users able to add to – but not delete or alter – the transaction log. Transactions are encrypted and must be verified by the network.

"The software used to build a chain ensures that everyone on the network sees, validates, and confirms each proposed next block of data in the chain," Brian Behlendorf explained in a blog post for HIMSS.

"For example, if any node on the network tries to transfer a particular asset twice, to two different parties, that transaction would not be validated by others on the network, and there would be no agreement to add it as a new block on the chain," said Behlendorf, executive director of Hyperledger, an open-source collaborative launched by the Linux Foundation to advance the use of blockchain beyond bitcoin transactions.

Behlendorf also spotlighted the importance of so-called smart contracts on the blockchain ledger: "simple software programs that runs across all nodes in the network and can extend the validation logic at each node in a way that is automatable and undeniable." In healthcare, for example, such smart contracts could be deployed as an "authorization process and confirmation step that notifies the patient – or even puts them in control – when their data is shared from one address to another."

Behlendorf said that because blockchain technology is distributed by design, storage space is limited, so small data or metadata is preferable. The option is to store records or files either on- or off-chain, he said. Large healthcare files such as imaging scans or PDFs wouldn't need to be stored entirely on the chain, but could be linked to it with a hash, or cryptographic numeric fingerprint, to ensure it hasn't been altered.

While one of the strengths of blockchain is its visibility and therefore accountability, not all blockchains are publicly available, he said.

"Just as you might have a private network at your house, or use a VPN to connect to the office, there will be private or consortium chains running between specific organizations, perhaps with a legal or regulatory agreement binding the participants," Behlendorf said.

A healthcare organization, for example, could "limit its network nodes to only HIPAA-covered entities, in addition to encrypting some data and leaving other data off-chain to provide multiple layers of security."