ISO 17090-4-2020 pdf free download – Health informatics — Public key infrastructure — Part 4: Digital signatures for healthcare documents.
This document supports interchangeability of digital signatures and the prevention of incorrect orillegal digital signatures by providing minimum requirements and formats for generating and verifyingdigital signatures and related certificates.
This document describes the common technical, operational, and policy requirements that need to beaddressed to enable digital certificates to be used in protecting the exchange of healthcare informationwithin a single domain, between domains, and across jurisdictional boundaries.lts purpose is to createa platform for global interoperability. It specifically supports digital certificate enabled communicationacross borders but could also provide guidance for the national or regional deployment of digitalcertificates in healthcare.
lt defines the provable compliance with a PKl policy necessary in the domain of healthcare. Thisdocument specifies a method of adopting long-term signature formats to ensure integrity and non-repudiation in long-term electronic preservation of healthcare information.
This document provides Healthcare specific PKI (HPKl) profiles of digital signature based on the ETSIStandard and the profile of the ISO/ETSI Standard specified in CAdES,XAdES, and PAdES.
2Normative references
The following documents are referred to in the text in such a way that some or all of their contentconstitutes requirements of this document. For dated references,only the edition cited applies.Forundated references, the latest edition of the referenced document (including any amendments) applies.ISo 17090-1,Health informatics — Public key infrastructure — Part 1:Overview of digital certificateservices
3 Terms and definition
For the purposes of this document, the terms and definitions given in ISO 17090-1 and the following apply.ISO and IEC maintain terminological databases for use in standardization at the following addresses:
—ISO online browsing platform: available at https:.//www.iso.org/obp
— IEC Electropedia: available at http://www.electropedia.org/
3.1 certification path
connection of a series of certificates binding the certificate that is to be validated to a trusted roottrust anchor
3.2 certification path validation
path to be validated to a trusted root trust anchor including revocation checking
4Target of application4.1 Target system
The target systems of this document are as follows:a)
the digitalsignaturelibrary with the digital signature function and the digital signature verificationfunction for the medical treatment application;
b) the digital signature program and the digital signature verification program as the stand-alone
software or with the medical treatment application;
The following are out of the scope of application:
a) the medical treatment application that does not process the digital signature data directly;
b) the medical treatment application that processes the digital signature and the result of signature
verification with the digital signature library, the specific digital signature program, or the specificdigital signature verification program;
c) the application interface and user interface; Figure 1 shows an example of the processing layer.
The digital signature application layer (the digital signature library, the digital signature program,or the digital signature verification program) is the target scope of this example. Therefore, thefollowing layer, CSP, and PKCS#11, is not within the targeted scope of this document.
In HPKl, it is assumed that storage modules of the end entity subscriber private key conform tostandards of levels equal to or higher than US FIPS 140-2 level 1.Also, in addition to the smart card, asillustrated in Figure 1, a system could use a USB token, software token, etc.as the medium that storesthe private key.ISO 17090-4 pdf download.