Deploying quality management in trusted third parties within a medical environment: Towards ISO9000 compliance

Health Informatics Journal

Volumn 8, Issue 1, 2002, Pages 4-13

  Lekkas, D ^a   Gritzalis, S ^a,b   Katsikas, S ^a  

^a UNIVERSITY OF THE AEGEAN   (Greece)

^b Department of Informatics Technological Educational Institute ^*  (Greece)

Author keywords

health information system; ISO 9000 quality standard; public key infrastructure; Quality; security; trust

Indexed keywords

EID: 34250777915     PISSN: 14604582     EISSN: None     Source Type: Journal    
DOI: 10.1177/146045820200800102     Document Type: Article

References (17)

1. ISO 9001. Quality systems - Model for quality assurance in design, development, production, installation and servicing, 1994.
2. ISO 9004-2. Quality management and quality system elements - Part 2: Guidelines for services, 1991.
3. VeriSign. Certification Practice Statement, 1999, http://www.verisign.com
4. Entrust. Certification Practice Statement, 1999, http://www.entrust.net
5. Viacode. Certification Practice Statement, 1999, http://www.viacode.com
6. Castell S. Code of practice and management guidelines for trusted third party services. European Commission, INFOSEC S-2101 project, report no. 2, 1993.
7. Commission of the European Community. Green Paper on the security of information systems, version 4.2.1, 1994.
8. Kohnfelder L M. Towards a practical public-key vryptosystem, PhD thesis, 1978, MIT.
9. Kokolakis S, Gritzalis D, Katsikas S. Generic security policies for healthcare information systems. Health Informatics Journal 1999; 4 (3): 184-195.
10. Gritzalis S, Katsikas S, Lekkas D, et al. A European cross-domain PKI architecture Keystone, CEC DGXIII ETS-II ‘98 23187 project, EU, 1998.
11. Swedish Medical Association. Information technology: the physician and the patient. Stockholm: SMA, 1995.
12. Hoyle D. ISO-9000 quality systems handbook. 3rd Edn. Oxford: Butterworth Heinemann, 1998.
13. Kokolakis S, Gritzalis D, Katsikas S. Health care security and privacy in the information society. Medsec, ISIS programme, EU, 1997.
14. OPARATE, ‘Operational and Architectural Aspects of TTPs for Europe’, CEC DGXIII ETS-II ‘98 project, EU, 1998.
15. Spinellis D, Kokolakis D, Gritzalis S. Security requirements, risks and recommendations for small enterprise and home-office environment. Information Management and Computer Security 1998; 7 (3): 121-128.
16. An overview of the PKCS standards, RSA Laboratories, 1993.
17. RFC-2527 ‘Internet X.509 public key infrastructure certificate policy and certification practices framework. IETF, 1999.