What is ISO/TR 22696 about?
ISO/TR 22696 gives guidance for managing healthcare service security using connectable personal health devices (PHD). This document considers unidirectional data uploading from the PHD to the gateway (manager device), however, there are many clinical use cases for bidirectional data exchange.
ISO/TR 22696 is applicable to identification and authentication between the bidirectionally connected PHDs and gateway by providing possible use cases and the associated threats and vulnerabilities. Since some smart devices with mobile healthcare apps and software might connect to the healthcare service network, these devices will be considered connectable PHDs in this document.
ISO/TR 22696 addresses those devices used in a homecare setting, where the knowledge and capabilities regarding the use of PHDs might not be as advanced as in other healthcare settings.
NOTE: ISO/TR 22696 excludes specific protocols, methods and technical solutions for identification and authentication.
Who is ISO/TR 22696 for?
ISO/TR 22696 on authentication of connectable Personal Healthcare Devices is useful for:
- Healthcare industries
- Healthcare professionals (pharmacists, physicians)
- Healthcare delivery organizations
- Research and development companies
- Health IT systems
- Manufacturers of Personal Health Devices
Why should you use ISO/TR 22696?
Personal Health Devices (PHDs) are designed to exchange information electronically with other health IT systems in the user environment, and such information is frequently exchanged through the internet.
ISO/TR 22696 gives guidelines for handling security threats to PHDs, which helps to prevent spread damages to the healthcare systems and human lives through the networks that are meant to be kept secure for the benefit of the healthcare service users.
Currently, there is no proper guidance for identification and authentication of the PHDs in case of the bidirectional connection between the PHDs and the gateway. ISO/TR 22696 provides you guidance for identification and authentication process for the successful operation and management of the PHDs.
ISO/TR 22696 helps healthcare device manufacturers and operators to provide users with mutual authentication between the gateway and the connectable devices for a secure bidirectional communication and the integrity of sensitive personal health information.
