Re: Domino and HIPPA -- DOMINO400

Rob -

I found this in an FAQ on an SMU website at
http://acec.seas.smu.edu/Schools/Houston/HIPAA/hipaa.html

"22. Q: Is encryption technology use mandated under HIPAA for the
transmission of patient information over a network and is there an
encryption key level requirement.

A: Under the HIPAA Security NPRM, encryption is only required for open
networks (e.g. non-private, Internet, dial-up, etc.) - all other
implementations of encryption are optional. Neither does the HIPAA Security
NPRM mandate a specific level of encryption or type of algorithm. The
guidance on minimum encryption levels were established as part of the HCFA
Internet Policy, published November 1998 which details requirements for
transmission of patient information over the Internet. Those levels are 112
bit symmetric (3-DES), 1024 bit asymmetric and 160 bit elliptical key."

HTH,

Steve


<rob@xxxxxxxxx> wrote in message
news:OFA1863647.3A1FEBA5-ON05256DC8.004561FE-05256DC8.0046313F@xxxxxxxxxx
> Last night I was at an event for my daughter who is a senior in high
> school.  I was talking to her boyfriend.  He is a freshman in college and
> also works in systems for his grandfather.  He's doing some impressive
> work at one of the largest medical offices in the Kalamazoo area.  The
> office is primarily MAC OS.  Sounds like they have an impressive
> Electronic Medical Records system.  The mail server is some open source
> package running on Red Hat.  He talked about a mail bomb that overloaded
> their server.  I mentioned that we had issues on R5 of Domino that R6 of
> Domino had some nice features to overcome this.  Such as blacklist filters
> and not accepting email that didn't have a valid address on the inside.
>
> The scary part was that he said that they used to be a Domino mail shop.
> They converted off of that because HIPPA required 1024 bit encryption and
> Domino didn't support that but their open source package did.
>
> He also mentioned that the package also had some of the features as R6 for
> this kind of mail.  However he said something about the feature was lost
> because of bugs and will be reinstated when they get the new Panther
> version of OS for the Mac due out any day.
>
> Anyone else run into this HIPPA restriction?
>
> Rob Berendt
> --
> "They that can give up essential liberty to obtain a little temporary
> safety deserve neither liberty nor safety."
> Benjamin Franklin
> _______________________________________________
> This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing list
> To post a message email: Domino400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/domino400
> or email: Domino400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/domino400.
>
>