Authentication in a health service context

Project title

Authentication in a health service context

Reference number

HIG10038; NFR158777/530

Start

July 2004

Effort

1 PhD student + 1 post doc

Primary contact

Professor Einar Snekkenes

Staff

Dr. Patrick Bours, Kirsi Helkala

Project web page

http://www.nislab.no/research/projects/hig10038/live

Project summary

There are many classes of applications where it is critical to know what individual has trigged an ICT system or a human to carry out a task or disclose some information. This project will focus on authentication in a `health service' context. In practice, when it comes to authentication of humans, it is difficult to give a 100% guarantee that the individual being authenticated is in fact the 'right' person. This goal of the project is to produce security performance indicators for many classes of personnel authentication mechanisms. The results of the project will be relevant for users, system specifiers, designers, developers and security managers which need to know the security strength and effectiveness of particular approaches to authentication.

Principal objectives and subgoals

This project will focus on authentication in a `health service' context. The goal of the project is to produce security performance indicators for many classes of personnel authentication mechanisms. The results of the project will be relevant for users, system specifiers, designers, developers and security managers which need to know the security strength and effectiveness of particular approaches to authentication.

The principal objective of the proposed project is to establish an environment for information security research and development at Gjøvik University College, taking advantage of the unique combination of expertise offered by the Health and Technology faculties. The focus of the project will be Authentication in a Health Service context. The project will be used to explore potential synergies and opportunities for cooperation. The goal of the project is to simplify the decision process for those implementing or using authentication technology, addressing the issue of `How secure is ...?'. Primary subgoals include:

• The construction of a framework and models for simplifying the security comparison of very different mechanisms for personnel authentication.
• Obtain security performance data on different approaches to personnel authentication.
• Theory for establishing the security when combining multiple approaches or enhancement techniques.