Abstract
EUROMED, a DG III project1, aims to create the foundation of telemedical information society. EUROMED-ETS, an INFOSEC project, provided secure communications among EUROMED participants by establishing Trusted Third Party Services (TTPs) over the Web. Java technology plays an important role in EUROMED. In this paper, the threats that Java technology introduces to EUROMED are explored and security countermeasures are proposed, utilizing the TTP infrastructure.
Chapter PDF
References
Ahuja, V.: Network & Internet Security. Academic Press, NY 1996.
Barber, B., Bakker A.R. and S. Bengtsson(eds.): Caring for Health Information: Safety, Security and Secrecy. Amsterdam: Elsevier Science, 1994.
Blobel, B.: “Towards Security in Medical Telematics: Legal and Technical Aspects,” Open Information Systems and Data Security in Medicine. Barber B., Treacher A. and K. Louwerse (eds). pp.168–182. IOS Press, Amsterdam, Washington, Tokyo, 1996.
Council of Europe Recommendation R(97)5: On The Protection of Medical Data. Council of Europe, Strasbourg, 13 February 1997.
UK Dept. of Trade and Industry ref. URN 97/669: Licensing of Trusted Third Parties for the Provision of Encryption Services. London, March 1997.
Menezes, van Oorschot and Vanstone.: Handbook of Applied Cryptography. CRC Press, 1996.
Rothermel, K. and R. Popescu-Zeletin (eds).: Mobile Agents’97 — Proc. 1st International Workshop. LNCS 1219, Springer-Verlag, April 1997.
Schneier, B.: Applied Cryptography, Protocols, Algorithms and Source Code in C. J. Wiley and Sons Inc, 2nd Ed, 1996.
Camp L.J., Sirbu M.: “Critical Issues in Internet Commerce,” IEEE Communications Magazine. pp.58–62. IEEE Press, 1997.
Yourdon E.: “Java, the Web and Software Development,” IEEE COMPUTER Magazine. pp.25–30, 1996.
Hamilton M.: “Java and the Shift to Net-Centric Computing,”. IEEE COMPUTER Magazine. pp.31–39, 1996.
Vigna G. (ed): Proc. Mobile Agents and Security. LNCS, Springer-Verlag, 1998 (forthcomming).
Marsh A., Delibasis K., Mouravlianski N. and C. Michael: “EUROMED — A WWW-based multi-mediaTelemedical information system,” subm. in Transactions on Information Technology in Biomedicine.
Marsh A.: “EUROMED — A WWW-based multi-media medical information system,” Proc. 19th Annual Intl. Conf. IEEE Engineering in Medicine and Biology Society. IEEE-EMBS, Chicago, 1997.
McGraw G. and Ed Felton: Java Security: Hostile Applets, Holes, and Antidotes. J.Wiley, ISBN 0-471-17842-X.
Venners, B.: “Java security: How to install the security manager and customize your security policy,” www.javaworld.com/javaworld/jw-11-1997/jw-11-hood.html
Sun Microsystems Inc.: “Secure Computing with Java: Now and the Future,” (White Paper) Java One 1997 Conference. j ava.sun.com/marketing/collateral/security.html
Sun Microsystems Inc.: “Security-related Java APIs,” j ava.sun.com/security
Freier, P., Karlton and P. Kocher: “The SSL Protocol Version 3.0,” Internet Engineering Task Force: Internet Draft. ietf.org/internet-drafts/draft-ietf-tls-ssl-version3-00.txt
Rescorla, A. and Schiffman: “The Secure HyperText Transfer Protocol,” Internet Engineering Task Force: Internet Draft. ietf.org/internet-drafts/draft-ietf-wts-shttp-03.txt
Rivest, R.: “The MD5 Message-Digest Algorithm,” MIT Laboratory for Computer Science and RSA Data Security, Inc., April 1992. Internet Engineering Task Force: Request For Comments RFC1321. ds.internic.net/rfc/rfc1321.txt
EUROMED, ISIS ’95, DG III programme, 1995–1998. euromed.iccs.ntua.gr
EUROMED-ETS: Trusted Third Party Services for Health Care in Europe. INFOSEC programme, DG XIII, 1997. narcisus.esd.ece.ntua.gr/www/ETS
NIST, FIPS PUB 180-1: Secure Hash Standard. National Institute of Standards and Technology, U.S. Dept. of Commerce, April 1995.
Krawczyk, H., Bellcare M. and R. Canetti: “HMAC: Keyed-Hashing for Message Authentication,” Internet Engineering Task Force: Request for Comments. ds.internic.net/rfc/rfc2104.txt
ANSI X3.106: American National Standard for Information Systems Data Link Encryption. American National Standards Institute, 1983.
Tuchman, W.: “Hellman Presents no Shortcut Solutions to DES,” IEEE Spectrum. 16:8, July 1979.
Thayer, R. and K. Kaukonen: “A Stream Cipher Encryption Algorithm,” Internet Engineering Task Force: Internet Draft, July 1997. ietf.org/internet-drafts/draft-kaukonen-cipher-arcfour-01.txt
RSA Laboratories: “PKCS #12: Personal Information Exchange Syntax Standard,” (version 1.0 Draft), April 1997.
CEC COM (90) 314 final SYN 287: “On the Protection of Individuals in Relation to the Processing of Personal Data,” Commission of the European Communities, Brussels, September 1990.
CEC COM(90) 314 final SYN 288: “On the Protection of Personal Data and Privacy in the Context of Public Digital Telecommunication Networks,” Commission of the European Communities, Brussels, September 1990.
CE R(81)1: Recommendation R(81)1 on Automated Medical Data Banks, Council of Europe Convention 108, January 1981, ISBN 92-871-0022-5.
EU 95/46/EC: On the Protection of Individuals with regards to the Processing of Personal Data and on the Free Movement of Such Data, European Union Directive, OJ L281/31-50, October 1995.
Simitis, S.: “Reviewing Privacy in an Information Society,” Univ. Pennsylvania Law Review, V.135, pp.707–746, March 1987.
Sun Microsystems Inc.: “Java Naming and Directory Interface,” java.sun.com/products/jndi
Wahl, M., Howes, T. and S. Kille: “Lightweight Directory Access Protocol (v3),” Internet Engineering Task Force: Request For Comments RFC2251. ds.internic.net/rfc/rfc2251.txt
Author information
Authors and Affiliations
Editor information
Rights and permissions
Copyright information
© 1998 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Varvitsiotis, A., Polemi, D., Marsh, A. (1998). EUROMED-JAVA: Trusted Third Party Services for securing medical Java applets. In: Quisquater, JJ., Deswarte, Y., Meadows, C., Gollmann, D. (eds) Computer Security — ESORICS 98. ESORICS 1998. Lecture Notes in Computer Science, vol 1485. Springer, Berlin, Heidelberg. https://doi.org/10.1007/BFb0055865
Download citation
DOI: https://doi.org/10.1007/BFb0055865
Published:
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-65004-1
Online ISBN: 978-3-540-49784-4
eBook Packages: Springer Book Archive