Re: Principles of health care system security.

[Wayne Wilson]

Tim Cook wrote:
> 
> "Dr. Ernst Molitor" wrote:
> 
> 
> > What shall happen in case a certain passphrase is compromised?
> 
> Or worse yet, lost and forgotten?
> Is there an EMERGENCY show everything MASTER passphrase?
> 
> If there is, who holds it? Isn't it a hole in the security model?
> 
No.  This is a well understood model.  You can have key escrow or
multiple keys, or partial keys that require two or more people to
re-construct (sort of like the two keys to fire the nuclear weapon). 
You can put process's in place that protect them according to the
security model.  All security  models acknowledge that there are a set
of people who are trusted with 'super-user' access to not abuse their
permissions.  These people should be well taken care of by the
oranization and either have high ethics or be very well compensated, or
both (I like the latter best :).