DCM4CHEE Archive Encryption

[dhava...@gmail.com]

Hi

I want to know if DCM4CHEE Archive (Storage Data) can be encrypted for security reason, I just came to know that according to HIPAA rules Archive has to be encrypted
Can anyone tell me how can we encrypt the Data which is stored in archive directory

Thanks

[Alvaro G. [Andor]]

Hi,

The easiest way to do it is filesystem or hardware encryption. If you
already have your hardware deployed or selected, look for an encrypted
filesystem solution. Something like the latest ZFS versions, EFS on
Windows, LUKS on Linux or EFS on AIX (yes, same name than on windows,
but different thing...).

Have a nice day...

El 17/09/13 19:53, dhava...@gmail.com escribi�:

> --
> You received this message because you are subscribed to the Google
> Groups "dcm4che" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to dcm4che+u...@googlegroups.com.
> To post to this group, send email to dcm...@googlegroups.com.
> Visit this group at http://groups.google.com/group/dcm4che.
> For more options, visit https://groups.google.com/groups/opt_out.

[Oleg Kovalchuk]

Curious, could you point to that HIPAA rule? AFAIK HIPAA states the data has to be encrypted if you do not have control over its location ie using GCE or AWS. If the archive is located in a HIPAA compliant Data Center there is no requirement for encryption.

[dhaval joshi]

Below is the link:

http://resource.onlinetech.com/encrypting-data-to-meet-hipaa-compliance/

--
You received this message because you are subscribed to a topic in the Google Groups "dcm4che" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/dcm4che/mFQqN9Pv8-8/unsubscribe.
To unsubscribe from this group and all its topics, send an email to dcm4che+u...@googlegroups.com.

To post to this group, send email to dcm...@googlegroups.com.
Visit this group at http://groups.google.com/group/dcm4che.
For more options, visit https://groups.google.com/groups/opt_out.

--
Thanks
Dhaval Joshi

[Oleg Kovalchuk]

Yup. What that article forgets to mention is that "§164.306… Implement" in the CFR the dot dot dot actually contains not required but addressable. Which does give you the flexibility to not add about 10-30% of performance overhead to a large data archive if it is stored in a secured facility. Totally up to you, everything andor suggested above stand true, just giving you an opinion of someone who went through the exercise of encrypting the filesystem with dcm4chee and running few performance checks.

see http://www.law.cornell.edu/cfr/text/45/164.312 for details.

Cheers,
OK