Health Informatics — Dynamic on-demand virtual private network for health information infrastructure

This document describes the threats anticipated in a healthcare network, as well as how a dynamic on-demand VPN is applied in the healthcare field. It explains the network requirements in the healthcare field, the network security of an open network for the healthcare field, and the minimum guidelines for security management of health information exchange, including personal data, between external institutions.

These requirements will assist in understanding the operation of security and evaluation of security issues in the healthcare field, and the usefulness of a managed VPN, such as a dynamic on-demand VPN.

Examples are included of security measures taken in a dynamic on-demand VPN for exchange of medical information. These examples provide network solutions to potential risks in such a user environment. They do not specify the dynamic on-demand VPN itself.

Main sections:

· Scope

· Network features in the healthcare field

· Concept of network construction in the healthcare field

· Threat analysis and measures

· Network construction in the healthcare field

· Cases of security measures in a dynamic on-demand VPN for exchange of healthcare information with external institutions

· Annex A: Threat analysis and measures

· Annex B: Security management of medical information exchange including personal data between independent institutions

· Annex C: Technical and operational checklists for the guideline

· Annex D: Technology used: Dynamic on-demand VPN