{"id":11386,"date":"2021-06-23T10:26:22","date_gmt":"2021-06-23T08:26:22","guid":{"rendered":"https:\/\/www.addimedical.se\/?page_id=11386"},"modified":"2021-06-23T10:36:35","modified_gmt":"2021-06-23T08:36:35","slug":"security","status":"publish","type":"page","link":"https:\/\/www.addimedical.se\/en\/security\/","title":{"rendered":"Security"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\t\t
\n\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\r\n\t\t\t
\r\n\r\n\t\t\t\t\r\n\t\t\t\t
\r\n\r\n\t\t\t\t\t\r\n\t\t\t\t\t
    \r\n\t\t\t\t\t\t
  1. \r\n \r\n \r\n \r\n \r\n ADDI Medical <\/a>\r\n <\/span>\r\n \r\n <\/li>
  2. \/ <\/span><\/li>
  3. Security<\/span><\/li>\t\t\t\t\t<\/ol>\r\n\t\t\t\t\t
    <\/div>\r\n\t\t\t\t<\/div>\r\n\t\t\t<\/div>\r\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
    \n\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\tShare page:  \t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
    \n\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t<\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t<\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t<\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t<\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t<\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t\t
    \n\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t\t
    \n\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
    \n\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    Security<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    The Security building block in the HOPE Platform is based on an advanced \u00a0access policy, a so-called \u201ddeny first principle\u201d.\u00a0This means that all access to information is restricted as a default. Access to information is activated only for a limited number of select people.<\/p>

    The restriction also applies to systems architecture, user authentication and how user access is managed by ADDI Medical for access to the system for maintenance and support purposes.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

    \n\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    \"\"<\/p>

    HOPE Platform\u2122 meets the requirements of the MDD (Medical Devices Directive) 93\/42\/EEC.<\/p>

    \u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

    \n\t\t\t\t\t\t
    \n\t\t\t\t\t
    \n\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    Authentication<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    HOPE Platform has two main types of user:<\/p>

    • Healthcare and medical staff including doctors, nurses, administrators and research staff.\u00a0These users work in HOPE Practitioner.<\/span><\/li>
    • The patient uses HOPE App.<\/li><\/ul>

      Both types of user must authenticate themselves in accordance with established authentication methods before gaining access to information and functions in HOPE Platform. This applies to everything from registering information and participating in an activity such as a video meeting to answering a questionnaire.<\/p>

      \"\"The SITHS cards are mainly used by healthcare staff to log in and the patient uses the pairing service or BankID.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

      \n\t\t\t\t
      \n\t\t\t\t\t

      Pairing service<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t

      Patient Connector facilitates pairing between HOPE App and HOPE Practitioner. The purpose of the service is to connect the patient’s access to information via different user interfaces. \u00a0<\/p>

      Patient Connector is a software framework included in HOPE Platform. The framework requires minimal configuration and automatically sets up services used to pair HOPE App with HOPE Practitioner.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

      \n\t\t\t\t
      \n\t\t\t\t\t

      Encryption<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t

      All communication in HOPE Platform takes place via web services. Authentication is required to get access to the web services.<\/p>

      When transferring encrypted data, TLS (Transport Layer Security, cryptographic communication protocol)\u00a0is used, which means that no unauthorised party can eavesdrop on a video meeting or take part in any other communication between the patient and care services.\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

      \n\t\t\t\t
      \n\t\t\t\t\t

      Log<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t

      In accordance with the Swedish Patient Data Act (PDL), HOPE Platform logs all user activity and saves the individual log for at least 5 years.<\/p>

      The log reports:<\/p>

      • Patient data activity, for example when the caregiver has read, edited, exported, copied, created, or printed healthcare documentation<\/li>
      • The healthcare unit and the time at which the activity was carried out and by whom<\/li>
      • Identity of the patient involved<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
        \n\t\t\t
        \n\t\t\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t

        Secure data storage<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t\t\t\t\t

        HOPE Platform can be run as SaaS \u2013 Software as a Service \u2013 a cloud-based system for which the company does not need to install and maintain clients on each individual workstation.<\/p>

        Operational responsibility
        <\/strong>ADDI Medical is responsible for application operations, managing backups and updates of new versions of HOPE Platform, as well as support and monitoring logs. This process is described in our maintenance process as part of our quality management system.<\/p>

        Service pack and security updates in Azure
        <\/strong>HOPE Platform is hosted on Azure. ADDI Medical applies service packages that includes regular security updates after release, in synch with existing HOPE Platform service windows.<\/p>

        Antivirus
        <\/strong>HOPE Platform is protected with Microsoft Defender Advanced Threat Protection. Security updates and patches are configured for automatic installation.<\/p>

        Local client side installation
        <\/strong>HOPE Platform is also developed to be installed and run locally at the customer. In this case, the customer is responsible for ensuring that security updates are performed and antivirus software is in place on the servers where HOPE Platform is installed.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

        \n\t\t\t\t
        \n\t\t\t\t\t

        PIN code<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t\t\t\t\t

        There is protection available in HOPE Platform in the form of the user being able to enter a Personal Identification Number (PIN code) – a personal security code made up of a numeric password.<\/p>

        A PIN code can be entered\u00a0 in HOPE App at any time. The PIN code consists of four digits selected by the user. The code is protected by encryption.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

        \n\t\t\t\t
        \n\t\t\t\t\t

        Laws and regulations<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t\t\t\t\t

        HOPE Platform also complies with the following \u00a0laws and regulations not covered by the Medical Devices Directive (MDD):<\/p>

        • General Data Protection Regulation (GDPR)

          <\/li>
        • Swedish Patient Data Act, PDL (2008: 355)

          <\/li>
        • Swedish National Board of Health and Welfare Code of Statutes (SOSFS 2008:14)

          <\/li>
        • Regulations and general guidelines concerning patient records and processing of personal data within health and medical care (HSLF-FS 2016:40)<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
          \n\t\t\t\t\t\t
          \n\t\t\t\t\t
          \n\t\t\t
          \n\t\t\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t\t\t\t
          \n\t\t\t
          <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

          Security The Security building block in the HOPE Platform is based on an advanced \u00a0access policy, a so-called \u201ddeny first principle\u201d.\u00a0This means that all access to information is restricted as a default. Access to information is activated only for a limited number of select people. The restriction also applies to systems architecture, user authentication and […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"cybocfi_hide_featured_image":"","footnotes":""},"class_list":["post-11386","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.addimedical.se\/en\/wp-json\/wp\/v2\/pages\/11386","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.addimedical.se\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.addimedical.se\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.addimedical.se\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.addimedical.se\/en\/wp-json\/wp\/v2\/comments?post=11386"}],"version-history":[{"count":0,"href":"https:\/\/www.addimedical.se\/en\/wp-json\/wp\/v2\/pages\/11386\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.addimedical.se\/en\/wp-json\/wp\/v2\/media?parent=11386"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}