ISO 17090-3:2021 PDF

Name: ISO 17090-3:2021 — Health informatics — Public key infrastructure — Part 3: Policy management of certification authority
SKU: ISO 17090-3:2021
Price: 25 EUR
Availability: InStock

Health informatics — Public key infrastructure — Part 3: Policy management of certification authority

Название (английский):

ISO 17090-3:2021

Health informatics — Public key infrastructure — Part 3: Policy management of certification authority

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 34
Дата публикации:: 9 марта 2021 г.
Издание:: ISO IS 17090 edition 2 version 1
ICS:: 35.240.80

Тип поставки:

Full version510 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:6 раб. дн. (перевод)

Цена:510 €

Описание (английский):

This document gives guidelines for certificate management issues involved in deploying digital certificates in healthcare. It specifies a structure and minimum requirements for certificate policies, as well as a structure for associated certification practice statements. This document also identifies the principles needed in a healthcare security policy for cross-border communication and defines the minimum levels of security required, concentrating on aspects unique to healthcare.

Abstract

Похожие стандарты

Упомянутые в описании и другие стандарты ISO

Overview

ISO 17090-3:2021 - Health informatics - Public key infrastructure - Part 3: Policy management of certification authority - provides guidelines for certificate management when deploying digital certificates in healthcare. It specifies a structure and minimum requirements for certificate policies (CPs) and a structure for associated certification practice statements (CPSs). The standard identifies principles for healthcare security policies that support cross‑border communication and defines minimum security levels focused on aspects unique to healthcare PKI deployments.

Key Topics and Requirements

The standard organizes policy management requirements around practical PKI operations commonly needed in healthcare:

Governance and assurance

Need for a high level of assurance, availability and trust for healthcare PKI.
Internet compatibility and facilitation of CP evaluation and comparison.

Structure of policy documents

Required structure and content for CPs and CPSs and their relationship.

Publication and repositories

Rules for repositories, publication frequency and access controls for certificate information.

Identification and authentication

Procedures for initial registration, identity validation, re‑keying and revocation requests.

Certificate lifecycle

Controls for application, issuance, acceptance, renewal, re‑keying, modification, revocation/suspension, status services (CRL/OCSP), and end of subscription.

Security controls

Physical controls, personnel and procedural controls, record archives, compromise and disaster recovery, and CA termination.
Technical controls such as key pair generation, private key protection, activation data, computer and network security, time stamping.

Profiles and audits

Certificate, CRL and OCSP profile requirements and compliance audit procedures (frequency, scope, auditor independence).

Legal and business matters

Fees, financial responsibility, confidentiality, privacy, IP, warranties, liability, dispute resolution and governing law.

Model PKI disclosure statement

Template guidance for communicating PKI properties to relying parties.

Applications

ISO 17090-3:2021 is designed to guide secure use of digital certificates across healthcare use cases, including:

Secure exchange of electronic health records (EHRs) and cross‑border patient data flows

Authentication and signing for e‑prescriptions, clinical messaging and telemedicine

Securing health information systems, device communications and interoperability gateways

Implementing trustworthy Certification Authorities (CAs) that serve hospitals, health networks and national health services

Related standards

Other parts of the ISO 17090 series (complementary PKI guidance for healthcare)

General PKI and cryptographic standards (ISO/IEC and regional standards) relevant to implementation and interoperability

Keywords: ISO 17090-3:2021, health informatics, public key infrastructure, PKI, certificate policy, certification authority, digital certificates, healthcare security, cross‑border communication, certificate management.

ISO 17090-3:2021 PDF

Abstract

Похожие стандарты

Overview

Key Topics and Requirements

Applications

Who Uses This Standard

Related standards

Технические детали

BS ISO 17090-1:2021

Health informatics. Public key infrastructure. Overview of digital certificate services.

ISO 8689-1:2000

Water quality — Biological classification of rivers — Part 1: Guidance on the interpretation of biological qu…

ISO/ASTM51540-04(2012)

Standard Practice for Use of a Radiochromic Liquid Dosimetry System (Withdrawn 2020)

ISO/ASTM51204-04

Standard Practice for Dosimetry in Gamma Irradiation Facilities for Food Processing (Withdrawn 2013)

ISO/ASTM51431-05

Standard Practice for Dosimetry in Electron Beam and X-Ray (Bremsstrahlung) Irradiation Facilities for Food P…

ISO/ASTM52628-20e1

Standard Practice for Dosimetry in Radiation Processing

ISO/ASTM52921-13(2019)

Standard Terminology for Additive Manufacturing—Coordinate Systems and Test Methodologies

ISO/ASTMTR52917-EB

Additive Manufacturing — Round Robin Testing — General Guidelines