Hospital IT&S Services
Patient Healthare information is a Mandated Priority
Hospital IT Services provides and maintains the comprehensive, integrated information systems designed to manage the medical, administrative, financial and legal aspects of a hospital and its service processing. Understanding who is accessing the hospital information system (HIS) is critical to protecting the integrity and security of the data and hospital entity in general.
CortiCare understands this prospective. As such we want to provide as much information as necessary to allow the Hospital IT&S Services to assess our communication technology and Interface Software. We understand information security and take our responsibility to protect our client’s information as our highest priority.
CortiCare's Interface Software for Remote Monitoring
CortiCare uses a proprietary computer software package for remote control of medical instrumentation and desktop sharing, including the file transfer between computers. The software operates with the Microsoft Windows, OSX, Linux, iOS, Android, and Windows RT operating systems. It is possible to access a machine running our application with a web browser. While the main focus of the application is remote control of computers, collaboration and presentation features are included.
How does it work, and is it Secure?
CortiCare uses a proprietary 3rd party Interface Software for remote control and viewing of the EEG patient monitoring systems located at the Hospital/Facility.
The software has these security features built-in to the robust architecture:
-
Point-to-Point VPN with 256 bit encryption.
-
No access to any Hospital networks on-site permission given to access EEG.
-
Strict control of the Interface Software is set by the facility; only the facility can start the software and pass the "single use" password to Corticare to monitor
-
Corticare personnel do not need any other access to network resources unless granted access by the hospital.
Does the Interface Software comply with the HITECH Act and Technical Standards of the HIPAA Security Rules
When it comes to information security the HITECH ACT and HIPAA do not specify how Patient Healthcare Information is secured during wireless transmission they just specify that it must be secure.
The Secretary of HHS did not specify encryption standards for HIPAA and HITECH but suggested encryption meets the standards developed by the National Institute of Standards and Technology (NIST).
Using those standards the CortiCare Interface Software is in compliance as a result of having:
-
Encryption – RSA public/private key exchange and AES 256 Bit session encoding.
-
Two factor authentication (public/private key exchange and verification)
-
Tracking reports of session logins and logouts
Lastly, CortiCare does not upload any information, or keep any PHI from the monitoring session.
CortiCare Connect Software Information....
Our connectivity software works with a complete encryption based on RSA public/private key exchange and AES (256 Bit) session encoding. This technology is comparable to https/SSL and can be considered completely safe by today's security standards because the private key never leaves the client computer.
Figure 1 - Encryption and Authentication
Click here for visual diagram on how point-to-point authentication works and how CortiCare Connect uses state-of-the-art software technology.
Need more Information....
Contact us for a further discussion about Security Information and our neurotelemetry remote viewing and communication software