Interoperability standards in the various stages of the transition to Cloud Computing: from Cloud to Trusted Cloud

Transcription

1 Health Cloud Computing Interoperability standards in the various stages of the transition to Cloud Computing: from Cloud to Trusted Cloud Danilo Cattaneo Direttore Generale InfoCert March19th 2012

2 Agenda Health Cloud Computing InfoCert at a glance An implementation of Trusted Cloud Digital Archiving: Azienda ULSS 8 From cloud to trusted cloud

3 Our Company at a glance Health Cloud Computing InfoCert offers quality services and solutions for digital Certification certification Authority for and Digital electronic Signature information management Certified Provider 1 Main Certification Authority in Italy in the Digit PA public list 3 Certified player for document management to legally defined standards 2 Leader in Registered 4 Qualified partner for business management processes InfoCert implements and supplies products and services with experience in consulting, design and development in various sectors (portals, security, digital certification and ICT regulations)

4 InfoCert Solution Health Cloud Computing Digital signature Time stamp Registered Document management Digital preservation Digital Signature on a USB Token: for digital document subscription OTP Remote Signature : for online subscription without devices Massive signature : automatic large number document subscription Documents certified date and time stamping Certification Authority certify the legal value of the information stamped Certified Digital communication maintaining legal value of paper communication (not rejectable) Legal value of acceptance and delivery receipts Document workflow management Digital process task automation and coordination Ensures integrity, readability and authenticity of documents stored Document presentation maintain the legal value of the original paper document Products Solutions

5 Our vision for e-health Health Cloud Computing 5 Step 3: Remote customer relation Perception Internal: good, many affected areas Users: excellent, have established a new relation channel with the organization and use mainly or exclusively web tools 100% paperless Electronic Medical Record: provides a common factor digital tools and process innovations introduced in the previous phases Digital request: shows on the web portal forms to start and interact with internal workflows. Back - End efficency Front - End efficency Step 2: Process automation Perception Registered Digital Internal : good, many areas involved document Users : good, they find new ways to communicate with the organization and perceived responsiveness preservation Electronic signature Digital request Archivistic System integration digital file Workflow Electronic Patient Record Archiving: advanced use of archive information sets the foundation for electronic health dossier Workflow: processes becomes completely digital, with cost reduction and time saving System Integration: vertical system integration disengages from phisical support Step 1: Single tool implementation Perception Internal : low, only from the few areas more involved Users : very low, they can begin to communicate by PEC and submitting digital documents. 100% paper REGISTERED E_MAIL: trusted communication with users and healthcare agencies SIGNATURE: paperless reports LONG TERM ARCHIVING: document long term archiving Users Emplyees

6 The project in Azienda ULSS 8 Health Cloud Computing 6 Targets: Consolidation of document assets (clinical, diagnostic, administrative ) Management of digital signatures (preservation of validity) Archival for full legal validity and long-term preservation The solution: A cloud based document preservation system with 9 connectors to clinical systems 1 connector to PACS; reconciliation between studies and records 2 connectors to administative systems flow Monitoring console local/remote Archive browsing facilities statistics archived data might offer disaster recovery service XDS operations supported on remote site

7 ULSS8 Asolo: main benefits Health Cloud Computing 7 redundant, secure, resilient services delegated adherence to norms and standards delegation of liability best-of-breed approach control flexibility, customizability scalability cost saving BEFORE Traditional on-site services AFTER CLOUD Trusted services

8 HealthCare and Trusted Cloud Health Cloud Computing 8 HealthCare has strong need for trusted services: Check of documents, possibly including digital signature Consolidation (time stamping) Archival for full legal validity and long-term preservation Identity management for proper document access Trusted Cloud = Cloud infrastructure + Trusted services Trusted services imply: 1 standards and law compliance 2 quality certification accreditation (whenever needed) 3 Security & Trust culture 4

9 The interoperability issues for a trusted cloud Health Cloud Computing 9 Issues at the CLOUD LEVEL: InfoCert operates with established standards in HealthCare: DICOM HL7 XDS Issues at the TRUSTED CLOUD LEVEL: Certified, strict compliance with legal standards Digital Signature formats and verification Standard security requirements Identity management, strong authentication Digital time stamping Standard presidium InfoCert operates with established standards in HealthCare (DICOM, HL7, XSD) Compliance presidium Certified, strict compliance with legal standards for Digital Signature, security, identity management Infrastructure investments Secured premises with access control 24hx365, access control, business continuity Third party certification ISO and ISO 9001 Certification, Adeherence to DigitPA guidelines for Certification Authorities and Registered providers

10 How do we guarantee what we do? Health Cloud Computing March 2012 International Regulatory Organization Membership ETSI (European Telecommunication Standards Institute), contributing to standards definition CEN/ISSS Member: E-Invoicing Interoperability Interfaces for public procurement in Europe (CEN WS/ BII) International Certification ISO Certification ISO 9001 Certification Adeherence to DigitPA guidelines for Certification Authorities and Registered E- Mail providers National Regulatory Organization Technical committee of Assocertificatori for digital signature Technical committee for Registered E-Invoicing Observatory (Politecnico di Milano) working group on Electronic Document promoted by ABI Lab Key data registered mailbox (PEC Legalmail) 100 million of certified mail message (PEC ) in million of document in legal storage 4.5 million of digital signature certification emitted 20 M turnover M turnover M share capital Economics Values certification as a formal assumption of company s committment on data and information management compliance on quality processes integrity, reliability, openess and transparency

11 Health Cloud Computing