EVS-EN ISO 22600-3:2014

Health informatics - Privilege management and access control - Part 3: Implementations (ISO 22600-3:2014)

Kehtiv alates 07.11.2014
ISO 22600-3:2014; EN ISO 22600-3:2014
Direktiivid või määrused
Standardi ajalugu
This multi part International Standard defines privilege management and access control services required for communication and use of distributed health information over domain and security borders. The document introduces principles and specifies services needed for managing privileges and access control. It specifies the necessary component-based concepts and is intended to support their technical implementation. It does not specify the use of these concepts in particular clinical process pathways nor does it address the safety concerns, if any, associated with their use. While Part 1 is a narrative introduction to the problem of policy bridging in the context of inter-organizational communication and co-operation, Part 2 defines a generic development process for analysing, designing, implementing and deploying semantically health information systems. The security services needed due to legal, social, organisational, user-related, functional and technological requirements have to be embedded in the advanced and sustainable system architecture meeting the paradigms for semantic interoperability. This Part 3 of the ISO 26000 instantiates requirements for repositories for access control policies and requirements for privilege management infrastructures. It provides implementation examples of the formal models specified in Part 2. This International Standard excludes platform-specific and implementation details. It does not specify technical communication security services, authentication techniques and protocols that have been established in other standards such as, e.g., ISO 7498-2 Information processing systems, Open Systems Interconnection, Basic Reference Model - Part 2: Security Architecture, ISO/IEC 10745 (ITU-T X.803), ISO/IEC 13594 - IT-Lower layers security (ITU-T X.802) and ISO/IEC 10181-1 (ITU-T X.810), ISO/IEC 9594-8 Information technology - Open Systems Interconnection - The Directory – Part 8 – Authentication framework (equiv. to ITU-T/X.509, ISO/IEC 9796 Security techniques, Digital signature scheme giving message recovery, multiple Parts (1-2), ISO/IEC 9797 Security techniques, Message authentication codes, ISO/IEC 9798 Information technology – Security techniques – Entity authentication.
24,89 € koos KM-ga
24,89 € koos KM-ga
Sirvi standardit: 2,40 € koos KM-ga
Standardi monitooring
Teised on ostnud veel

EVS-EN ISO 22600-1:2014

Health informatics - Privilege management and access control - Part 1: Overview and policy management (ISO 22600-1:2014)
Uusim versioon Kehtiv alates 07.11.2014

EVS-EN ISO 22600-2:2014

Health informatics - Privilege management and access control - Part 2: Formal models (ISO 22600-2:2014)
Uusim versioon Kehtiv alates 07.11.2014
Põhitekst + muudatus

EVS-EN ISO 7010:2020+A1+A2+A3:2022

Graphical symbols - Safety colours and safety signs - Registered safety signs (ISO 7010:2019, Corrected version 2020-06 + ISO 7010:2019/Amd 1:2020 + ISO 7010:2019/Amd 2:2020 + ISO 7010:2019/Amd 3:2021)
Uusim versioon Kehtiv alates 02.05.2022