Copyright, 1996 © Dale Carnegie & Associates, Inc.

Analgesic

Analgesic 2

The CHCS Headache

• CHCS Legacy is an active product in MTF community

• Supported as a requirement by medical professionals

• Implemented by medical researchers without consideration of security role.

• Security of CHCS data now paramount issue

• CHCS Certification Problematic

Public Internet

CHCS Legacy System

MTF Net

Analgesic 3

CHCS Symptoms...

• Security not part of original Design

• Telnet and FTP used extensively.

• Monitoring and capture a certainty.

• HIPAA, NIST, FISCAM & DITSCAP Certification and Accreditation not possible.

Analgesic 4

Recent History

• Attempts underway to replace not fruitful.

• Attempts to migrate met with pushback.

• Massive installed base of enthusiastic users.

Analgesic 5

A CHCS ANALGESIC

• Commodity windows platform placed between MTF Net and CHCS Legacy

• Unit requires extra Network Card• Analgesic Disk Placed into unit • Unit Boots with these services:

– SSL / TLS Web distribution of

– Java based Terminal Client

– SSL Server for Clients plus

– SSH, SFTP and SCP plus

– Certification Server

Analgesic

ComodityWindowsPlatform

CHCS I Legacy System

MTF Net

Analgesic 6

COTS Solution Available

• Bootable CD enclosed will solve the Security Headache.

• We recommend immediate use of this CD to mitigate security risk

• CD is freely distributed but is not free.

• This CD solution is a partnership of Four Firms

Analgesic 7

IntegrationServices

R2 Web SSLServices

LinuxPlatform

C&AServices

Analgesic Product Mix

Paladin Technologies

Analgesic 8

Analgesic Benefits

• Use of this Bootable CD as a security front end includes– SSL / TLS protection of CHCS system– FIPS 140-2 transmission protection– Certification & Accreditation part of the

package

Analgesic 9

Our Business Proposition• Use this bootable CD keeps a good system

operational and eliminates the Headache of CHCS Security.

• This is not a free solution. Cost per instance is accessible to Impact Card Holder. This single cost includes:

• WRQ R2 Web– Complete Web Based terminal emulation systems

– Never visit a workstation to fix a terminal server again

• Paladin Technology– HIPAA, NIST and DITSCAP Certification and Accreditiaon

• Live Linux Based Platform– HHS / NIH Compliant

– Software packaged on a Read Only CD

Analgesic 10

Boot This CD, Get Rid of Your CHCS Headache, and Pay Us Later

• There are no license protection schemes or time bombs on this disk.

• O&M Support available as part of package

• An institutional system cannot be Certified if License fee is not honored.

• CHCS can be secured, and remain useful

• No need to go beyond current development envelope.