Healthcare informatics developer HIPAAT of Mississauga, Ontario, will be highlighting three products to assist with HIPAA security-rule compliance.
Universal Audit Repository (UAR) is a standalone central repository of security audit events, appropriate as either a departmental or enterprisewide repository. It is able to receive IHE-specified XML audit messages from any vendor's equipment records, as well as specific security events defined as security incidents by HIPAA's security rule.
The software generates security alerts for those incidents, such as emergency override, and provides IT administrators with comprehensive Web-based search-and-report capabilities for HIPAA-related security and privacy audit events. It also includes an LDAP-based user authentication database with role-based access control, according to HIPAAT.
The firm said UAR currently supports the IHE basic security (year 4) profile and will support the IHE ATNA profile in the first quarter next year. The product is targeted at OEM developers of imaging modalities, as well as imaging departments and clinics, the company said. The product is available now.
The XML Auditlog Toolkit is a software module that can be integrated into modality equipment that is not IHE-compliant to enable the equipment to generate and send XML audit event messages following the IHE-specified schema. It has a C-based interface library to generate XML messages, is compatible with Unix, Linux, and Microsoft Windows, and supports the IHE basic security (year 4) profile and will support the IHE ATNA profile in the first quarter next year.
It is also targeted toward OEMs of imaging modalities, as well as imaging departments and clinics, and is available now, HIPAAT said.
The Universal Compliance Module (UCM) is a PC-based hardware/software module designed to provide legacy modality equipment with IHE-specified XML audit message capabilities and two-factor user authentication (such as a proximity card, personal identification number, or biometrics.) It connects externally at modality equipment to monitor network traffic, generating XML audit messages from DICOM messages as they pass through the UCM, according to the company.
The UCM records security incidents and events as XML audit messages for storage in any IHE-compatible repository, and it allows and tracks emergency overrides. It supports LDAP-based network user directories, acts as a firewall/gateway for DICOM, HL7, and HTTP network traffic, and can provide machine-to-machine data encryption, HIPAAT said.
UCM is available now and currently supports the IHE basic security (year 4) profile. It will support the IHE ATNA profile in the first quarter next year, the vendor said.
By Jonathan S. Batchelor
AuntMinnie.com staff writer
November 17, 2004
Copyright © 2004 AuntMinnie.com
