Re: Principles of health care system security.

[Wayne Wilson]

Horst Herb wrote:
> 
> 
> Whenever an attribute is selected in a query, a trigger will check whether
> the attribute is encrypted etc.
> 
This seems manageable in a scenario where a small number of users will
issues queries for data for which they, by and large, have the
passphrases for.  The larger the system is in terms of passphrases (who
get's them?, patients and clincian's and staff), then the more likely it
is that the query process will demand so many passphrases that the
system slows to a halt waiting for you to either provide them or say you
don't have them.

 In other words, this seems perfectly workable for a small practice
system, but not a large IDS.