Network information security in a phase III Integrated Academic Information Management System (IAIMS)

Area of Science:

• Health Informatics
• Network Security
• Information Systems

Background:

• Columbia-Presbyterian Medical Center is implementing an Integrated Academic Information System (IAIMS).
• The IAIMS aims to integrate data sharing between Columbia University Medical School and The Presbyterian Hospital.
• A network-based architecture connects heterogeneous database servers with diverse authentication protocols.

Purpose of the Study:

• To address policy and technical challenges in network-level data security.
• To ensure seamless information access for end-users of network-based services.
• To implement a unified, single log-on procedure for enhanced user experience.

Main Methods:

• Developing network security policies.
• Implementing a dedicated network authentication server.
• Utilizing Kerberos for mutual authentication, encryption, and time stamping.
• Creating a prototype interface for Kerberos-authenticated access to network database servers.
• Developing a Kerberized electronic signature for secure transactions.

Main Results:

• Established a framework for secure data sharing across distinct entities.
• Demonstrated the feasibility of Kerberos for network authentication and secure access.
• Developed a prototype for unified user authentication, simplifying access to multiple resources.
• Initiated policy development for robust network security.

Conclusions:

• The IAIMS project addresses critical security and access challenges in integrated healthcare information systems.
• Kerberos provides a robust solution for authentication, encryption, and secure data access in heterogeneous network environments.
• Successful implementation of these security measures is vital for efficient and secure information exchange in academic medical centers.