Considering PKI

1

• Considering PKI

2
What is PKI?

• PKI - or Public Key Infrastructure -
• is a combination of procedures technology
• provides security confidentiality for
  electronic business

3
What is PKI?

• Key Components of PKI are -

• Keys
• Digital Certificates
• Secure Tokens
• Public Directories

• Policy
• Procedures
• Encryption
• Decryption
• Digital Signatures

4
What is PKI Used for?

• PKI is used to -
• provide security for transactions undertaken over
  the Internet

5
What is PKI Used for?

• PKI provides -
• Authentication
• Integrity
• Non-repudiation
• Confidentiality

6
What is PKI Used for?

• PKI can be used for -
• Email
• Document transfer
• Communication with HIC

7
What are the Requirements?

• Minimum Requirements are
• Valid Digital Certificate
• Unique Email Address
• Internet Connection
• Minimum System Requirements

8
What are the Requirements?

• Minimum System Requirements are
• Pentium II processor or better
• 128 Mb RAM
• 50 Mb spare space on Hard Disk
• 3.5 floppy disk drive CD-ROM drive
• Windows 98, NT, or 2000 operating system
• Spare USB port or serial port

9
What are the Requirements?

• Recommended Requirements are
• Firewall
• Virus Protection

10
What are the Business Benefits?

• Potential Business Benefits are -
• Improved patient outcomes
• Improved customer service
• Cost efficiencies
• Time efficiencies
• Improved data quality

11
What are the Business Benefits?

• Business Value Case -
• Purpose
• Business Objectives
• Business Integration
• Business Value
• Risks
• Recommendation

12
What are the Business Considerations?

• Consider -
• Business Requirements
• Business Integration Issues

13
What are the Business Considerations?

• Business Requirements -
• Type of transactions
• Security requirements
• Type of certificates
• Frequency of transactions
• Number of certificates

14
What are the Business Considerations?

• Business Integration Issues -
• Security considerations
• Business considerations

15
What are the Business Considerations?

• Security Considerations -
• Password Management
• Key Management
• Information Management

16
What are the Business Considerations?

• Business Considerations -
• Business Processes
• Certificate Management

17
What is HeSAs Role?

• HeSA - the Health eSignature Authority -
• Established Feb 2000
• Registration Authority
• Gatekeeper Accredited

18
What is HeSAs Role?

• HeSA -
• Evidence of Identity Checks
• Digital Keys Certificates
• Generation
• Issue
• Suspension

• Revocation
• Renewal

19
What is the Registration Process?

• Registration Process comprises
• Application
• Evidence of Identity Check
• Key Generation Issue

20
What is the Registration Process?

• Application documentation -
• Registration Guide
• Agreement
• Identification Reference Form

21
What is the Registration Process?

• How to apply for an Individual Certificate -
• read Registration Guide
• complete sign Agreement
• complete sign Identification Reference Form
• attach certified copies of Evidence of Identity
  documentation
• return completed forms documents to HeSA

22
What is the Registration Process?

• How to complete the
• Individual Certificate
• Agreement

23
What is the Registration Process?

• How to complete the
• Individual Certificate
• Identification Reference Form

24
What is the Registration Process?

• How to apply for a Location Certificate -
• read Registration Guide
• complete sign Agreement
• complete sign Identification Reference Form
• attach certified copies of Evidence of Identity
  documentation
• return completed forms documents to HeSA

25
What is the Registration Process?

• How to complete the
• Location Certificate
• Agreement

26
What is the Registration Process?

• How to complete the
• Location Certificate
• Identification Reference Form

27
What is the Installation Process?

• Installation Process -
• Different for Individual Location Certificates
• May need to install
• Key drivers
• Digital certificates
• Additional software

28
What is the Installation Process?

• Installation Process for Individual Certificates
  -
• Installation CD
• Version 2.0
• Instructions
• Drivers Token Utilities
• Internet Browsers
• Certificates
• Secure email

29
What is the Installation Process?

• Installation Process for Location Certificates -
• Location Bonus CD
• Version 1.2
• Redevelopment
• Installation Guide

30
What are the Support Resources?

• Support Resources -
• Information Products
• Web Sites
• Email Contacts
• Help Desks

31
What are the Support Resources?

• Information Products -
• HeSA Introduction brochure
• HIC and Public Key Infrastucture (PKI) brochure
• PKI in Practice video on CD-ROM
• HIC Online - step-by-step guide
• HIC Online case studies
• HIC Online demo CD-ROM

32
What are the Support Resources?

• Websites -
• HeSA www.hesa.com.au
• HIC www.hic.gov.au

33
What are the Support Resources?

• Email contacts -
• HeSA registration_at_hesa.com.au
• HIC PKI-Secured pki_at_hic.gov.au
• HIC Online hic.online_at_hic.gov.au

34
What are the Support Resources?

• Help Desks -
• HeSA Help Desk 1300 660 035
• HIC PKI-Secured Help Desk 1300 660 035
• HIC Online Help Desk 1800 700 199

35
Questions?

• ?

36
More Information?

• http//www.hesa.com.au/toolkit/welcome.htm
• http//www.connectingcare.com/toc.asp
• Connectingcare project worker
• cbennett_at_mildura.vic.gov.au
• 0407 329 073
• Microsoft PowerPoint presentation, including
  speakers notes, based on the contents of the
  Knowledge Tree www.hesa.com.au