PKI Security Solutions for the Enterprise: Solving HIPAA, E-Paper Act, and Other Compliance Issues

334 Pages·2003·3.75 MB·English

by  Kapil Raina

Team-Fly®
PKI Security Solutions
for the Enterprise:
Solving HIPAA, E-Paper Act, and
Other Compliance Issues
Kapil Raina

PKI Security Solutions
for the Enterprise:
Solving HIPAA, E-Paper Act, and
Other Compliance Issues

PKI Security Solutions
for the Enterprise:
Solving HIPAA, E-Paper Act, and
Other Compliance Issues
Kapil Raina
Publisher: Robert Ipsen
Executive Editor: Carol Long
Assistant Developmental Editor: Adaobi Obi Tulton
Editorial Manager: Kathryn Malm
Managing Editor:Angela Smith
Text Design & Composition:Wiley Composition Services
This book is printed on acid-free paper. ∞
Copyright © 2003 by Kapil Raina. All rights reserved.
Published by Wiley Publishing, Inc., Indianapolis, Indiana
Published simultaneously in Canada
No part of this publication may be reproduced, stored in a retrieval system, or transmitted
in any form or by any means, electronic, mechanical, photocopying, recording, scanning, or
otherwise, except as permitted under Section 107 or 108 of the 1976 United States Copyright
Act, without either the prior written permission of the Publisher, or authorization through
payment of the appropriate per-copy fee to the Copyright Clearance Center, Inc., 222 Rose-
wood Drive, Danvers, MA01923, [phone], fax [phone]. Requests to the Pub-
lisher for permission should be addressed to the Legal Department, Wiley Publishing, Inc.,
10475 Crosspoint Blvd., Indianapolis, IN 46256, [phone], fax [phone], E-mail:
[email protected].
Limit of Liability/Disclaimer of Warranty: While the publisher and author have used their
best efforts in preparing this book, they make no representations or warranties with respect
to the accuracy or completeness of the contents of this book and specifically disclaim any
implied warranties of merchantability or fitness for a particular purpose. No warranty may
be created or extended by sales representatives or written sales materials. The advice and
strategies contained herein may not be suitable for your situation. You should consult with
a professional where appropriate. Neither the publisher nor author shall be liable for any
loss of profit or any other commercial damages, including but not limited to special, inci-
dental, consequential, or other damages.
For general information on our other products and services please contact our Customer
Care Department within the United States at [phone], outside the United States at
[phone] or fax [phone].
Trademarks: Wiley, the Wiley Publishing logo and related trade dress are trademarks or
registered trademarks of Wiley Publishing, Inc., in the United States and other countries,
and may not be used without written permission. All other trademarks are the property of
their respective owners. Wiley Publishing, Inc., is not associated with any product or ven-
dor mentioned in this book.
Wiley also publishes its books in a variety of electronic formats. Some content that appears
in print may not be available in electronic books.
Library of Congress Cataloging-in-Publication Data:
ISBN: 0-471-31529-X
Printed in the United States of America
10 9 8 7 6 5 4 3 2 1
To Amrita,
For all of her love and understanding
in helping me reach my dreams.

Contents
Acknowledgments xv
Introduction xvii
Part One Trust Basics: Ins and Outs of PKI 1
Chapter 1 What Is Trust? 3
Trust in the Digital World 3
Defining Trust 4
Implementing Trust 5
Trust Policies 6
Privacy 6
Proper Use of Information 6
Recourse in the Event of Breach of Trust 7
Continuity of Trust 8
User Consent 8
Trust Infrastructure 8
Physical Layer 9
System Layer 10
Application Layer 11
Trust Affiliations 12
Legal Issues with Trust in the Electronic World 14
Binding Trust with the Law 14
P3P 15
Digital Trust Solutions 16
Summary: The Need for Solutions 17
Chapter 2 Complexities of PKI 19
PKI: ABasis for Digital Trust 19
Why Is PKI So Complicated? 20
vii