DD ENV 13608-1:2000
Current
The latest, up-to-date edition.
Health informatics. Security for healthcare communication Concepts and terminology
Hardcopy , PDF
English
15-08-2000
Important note : All end users must be registered with an Account prior to user licenses being assigned.
Foreword
Introduction
1 Scope
2 Normative references
3 Definitions
4 Symbols and Abbreviations
5 Healthcare Communication Protection Profile Concepts
6 Architecture of the Policy Bridging Model (PBM)
Annex A (informative) Communication Protection Profile
examples and refinements
Annex B (informative) SEC-COM Part 2: Secure Healthcare
Data Objects
Annex C (informative) SEC-COM Part 3: Secure Data Channels
Annex D (informative) ISO/OSI 7498-2 Information processing
systems - Open Systems Interconnection
- Basic Reference Model - Part 2:
Security Architecture
Annex E (informative) ITU/CCITT X.435 Message Handling
Systems: Electronic Data Interchange
Messaging System (Recommendation X.435)
and ITU/CCITT F.435 Message Handling
Services: Electronic Data Interchange
Message Service (Recommendation F.435)
Annex F (informative) ISO 9735 EDIFACT Application level
syntax rules Electronic data
interchange for administration,
commerce and transport
Annex G (informative) ENV 12924:1997: Medical Informatics
- Security Categorisation and
Protection for Healthcare Information
Systems
Annex H (informative) Distribution Rules (CENTC251/WG1
N98-32 PT028)
Annex I (informative) HL7
Annex J (informative) CORBA
Annex K (informative) Common Criteria
Annex L (informative) Introduction to cryptography
Bibliography
Defines a methodology for defining, selecting and expressing a communication protection profile (CPP) specification, and provides a standard way to express healthcare user needs in relation to communication, and a standard method of successive refinement of policy statements that help to identify standardised security implementation specification that can be used to meet the security needs. Security aspects contained in the communication protection profile include confidentiality, integrity, availability and auditability.
| Committee |
IST/35
|
| DocumentType |
Standard
|
| Pages |
70
|
| PublisherName |
British Standards Institution
|
| Status |
Current
|
| Standards | Relationship |
| ENV 13608-1:2000 | Identical |
| ISO 9735-6:2002 | Electronic data interchange for administration, commerce and transport (EDIFACT) — Application level syntax rules (Syntax version number: 4, Syntax release number: 1) — Part 6: Secure authentication and acknowledgement message (message type - AUTACK) |
| ISO 9735-5:2002 | Electronic data interchange for administration, commerce and transport (EDIFACT) — Application level syntax rules (Syntax version number: 4, Syntax release number: 1) — Part 5: Security rules for batch EDI (authenticity, integrity and non-repudiation of origin) |
| ISO/IEC 10181-1:1996 | Information technology Open Systems Interconnection Security frameworks for open systems: Overview |
| ISO/IEC 9594-8:2017 | Information technology Open Systems Interconnection The Directory Part 8: Public-key and attribute certificate frameworks |
| ISO 7498-2:1989 | Information processing systems Open Systems Interconnection Basic Reference Model Part 2: Security Architecture |
| ISO/IEC 2382-8:1998 | Information technology Vocabulary Part 8: Security |
| ISO 9735-7:2002 | Electronic data interchange for administration, commerce and transport (EDIFACT) — Application level syntax rules (Syntax version number: 4, Syntax release number: 1) — Part 7: Security rules for batch EDI (confidentiality) |
| ISO/IEC 8824-1:2015 | Information technology Abstract Syntax Notation One (ASN.1): Specification of basic notation Part 1: |
| ISO 9735-4:2002 | Electronic data interchange for administration, commerce and transport (EDIFACT) — Application level syntax rules (Syntax version number: 4, Syntax release number: 1) — Part 4: Syntax and service report message for batch EDI (message type — CONTRL) |
Access your standards online with a subscription
Features
-
Simple online access to standards, technical information and regulations.
-
Critical updates of standards and customisable alerts and notifications.
-
Multi-user online standards collection: secure, flexible and cost effective.