RSNA 2014 

Abstract Archives of the RSNA, 2014


SSK12-05

HITECH Act: The Critical Missing Encryption Tools to Comply

Scientific Papers

Presented on December 3, 2014
Presented as part of SSK12: ISP: Informatics (Quality and Safety)

Participants

Anne Clara Krok, Presenter: Nothing to Disclose
Nogah Haramati MD, Abstract Co-Author: Investor, Kryon Systems Ltd Investor, OrthoSpace Ltd Investor, BioProtect Ltd Board Member, Kryon Systems Ltd Board Member, OrthoSpace Ltd Board Member, BioProtect Ltd Consultant, AFC Industries, Inc Advisory Board, General Electric Company
Karen Ellen Sperling MD, Abstract Co-Author: Nothing to Disclose
Shlomit Goldberg-Stein MD, Abstract Co-Author: Research Consultant, Intrinsic Therapeutics Inc
Malka B. Finkelstein MD, Abstract Co-Author: Nothing to Disclose
Shari Friedman MD, Abstract Co-Author: Nothing to Disclose
Mony Weschler MSC, BSC, Abstract Co-Author: Nothing to Disclose

PURPOSE

To assess whether the existing electronic encryption and multiplatform tools are sufficient for full compliance with the 2009 HITECH Act by non-tech savvy users operating in USA-based healthcare organizations

METHOD AND MATERIALS

We reviewed all existing encryption tools that are available as stand-alone products as well as tools that are packaged by vendors within more robust healthcare information systems. We reviewed each tool and package for the following characteristics 1. Ability to be used without requiring administrator privileges or authorization to install software on a computer/PC 2. Ability for the user to decrypt the files on-the-fly without requiring installation of the encrypting program on the destination computer/PC 3. Ability to encrypt/decrypt files in a multiplatform environment. Platforms utilized were Microsoft Windows (XP/Vista/7/8), MAC OSX (Versions 7 and higher), Android (Versions 4.0 ICS and higher), and iOS (6 and higher)  

RESULTS

No tools were identified that fulfilled all three of the major characteristics. Several packages were identified that can encrypt and decrypt on-the-fly, but these were all limited by platform. No USB-stick based tools exist that encrypt and decrypt on the fly without Computer/PC administrator privileges in a mixed Windows PC/Mac OSX environment.

CONCLUSION

Better tools are needed for compliance with the HITECH Act by non-tech savvy physicians USB-stick based tools that could encrypt and decrypt on the fly without Computer/PC administrator privileges might be the most crucial  

CLINICAL RELEVANCE/APPLICATION

Physicians collaborate, consult and lecture at institutions that are not their home institutions. Powerpoints and other information should be transported in an encrypted format to be fully HITECH Act compliant. Often, the Computer/PC available at the host institution does not allow software to be installed, and often, cloud services are blocked.

Cite This Abstract

Krok, A, Haramati, N, Sperling, K, Goldberg-Stein, S, Finkelstein, M, Friedman, S, Weschler, M, HITECH Act: The Critical Missing Encryption Tools to Comply.  Radiological Society of North America 2014 Scientific Assembly and Annual Meeting, - ,Chicago IL. http://archive.rsna.org/2014/14014924.html