November 16, 2003

Authentication

The four main types of computer security are:


  • Something you know

  • Something that you have

  • Something that you are

  • Someplace where you are


The something that you know, normally relates to a password or a memory question. This mechanism is also very easily implemented. Something you have or something you are, is a lot more difficult relating implementing due to expensive means such as a physical token or finger print in a non-profit organization. However the someplace where you are can be economically implemented for in house networks by allowing access for users to particular IP addresses. This addition will really help to secure systems.

In Healthcare and IT cost is always a large concern. Patient Privacy has always been a chief concern of hospitals, even more so with the HIPAA security regulation. So for in house applications, passwords have normally been the main mechanism of authentication from the vendors. But in order to add an extra layer of security, cheaply without purchasing a smart card system or a fingerprint scan, what if as a part of security maintenance, we limited the user to 5 or 8 ip addresses they can utilize an application. So we would maintain the access points of the application in addition to the password security.

Posted by Elyse at November 16, 2003 7:39 PM