The All-Russian center of the emergency and radiation medicine Emercom of Russia implemented an information security system of Gazinformservice

2018: Data protection system implementation

On July 27, 2018 the All-Russian center of the emergency and radiation medicine Emercom of Russia announced implementation by developed Gazinformservice of an information security system.

Federal State Budgetary Institution VTSERM of A.M. Nikiforov Emercom of Russia

According to the company, the works in the field of ensuring information and physical security executed by Gazinformservice company allow to provide personal data protection in information systems of the Center. The public key infrastructure unrolled by the company allowed to pass to maintaining legally significant electronic medical documents due to use by employees of electronic signatures. Specialists of Gazinformservice implemented pilot projects of conducting out-patient medical records in a paperless type and also exchange of electronic sheets of disability with the Social Insurance Fund of Russia based on the cryptographic Litoria Crypto Platform platform. These systems are at a stage of trial operation.

Also it was reported that for control automation access control in information and technology infrastructure of Federal State Budgetary Institution VTSERM of A.M. Nikiforov of Emercom of Russia unrolled an automated system of the order of admissions. Besides, the hardware and software system "Blockhost-MDZ" for personal data protection of patients and employees was implemented.

We are satisfied with results of collaboration from VTsERM in implementation of technologies in the field of information security. In the cryptographic Litoria Crypto Platform platform the experience gained within 13 years of work in the field of a public key infrastructure is implemented. The platform implements a full range of cryptographic functions and services in strict accordance with requirements of the legislation of the Russian Federation and also with a reference point on world practices. It can be easily integrated with information systems of different function. We wait for the solution VTsERM on transition to full-scale implementation of a public key infrastructure, including the system of archive storage of legally significant documents. Valery Pustarnakov, CEO of Gazinformservice company

About 2001 we create an end-to-end medical information system in our Center. It integrates records of doctors and also results of additional methods of researches received from the laboratory equipment, devices of beam and functional diagnostics. A core of a system is the electronic medical record. Use of the cryptographic Litoria Crypto Platform platform allowed us to approach transition to completely paperless conducting medical records closely. Implementation in activity of the center of smart cards with key information of medics allowed to protect personal data of patients from unauthorized access. Use of the domestic instrument of cryptoprotection of information allows our medical information system to conform to high international standards in the field of medical information science. Sergey Aleksanin, professor, director of Federal State Budgetary Institution All-Russian Center of the Emergency and Radiation Medicine of A.M. Nikiforov of Emercom of Russia

2011: Creation of an end-to-end system of data protection

The Gazinformservice company completed creation of an end-to-end system of data protection in Federal state healthcare institution "All-Russian center of the emergency and radiation medicine of A.M. Nikiforov" Emercom of Russia. Project implementation allowed clinic to provide the highest security level during the work in a hospital information system and to organize conducting legally significant document flow.

The All-Russian center of the emergency and radiation medicine of A.M. Nikiforov Emercom of Russia (VTsERM) provides medical care by the victim of radiative effects, in technogenic catastrophes and natural disasters. Two clinics and an out-patient and polyclinic complex allowing to provide medical and diagnostic process at the highest methodical and technology level, to execute research projects and to conduct educational work are a part of the center.

Data on all medical and diagnostic work of the center are concentrated in an end-to-end hospital information system. This system is based on use of electronic medical records of patients in which all history of their disease and treatment is reflected, results of researches are kept. For ensuring reliable confidential information protection and personal data of patients in a hospital system the decision on start of the complex project on information security was made. VTsERM were faced by the following tasks:

• provide authentication of staff of VTsERM in a hospital system, including heads of different level, attending physicians, laboratory assistants and service staff;
• create a control and management system for access to information resources;
• protect the medical and personal data which are stored including, in mobile workplaces of specialists doctors according to requirements of the Russian legislation;
• organize conducting legally significant electronic document management.

The Gazinformservice company which proposed the technological solution and the fastest implementation time became the contractor of the project. During the course of performance works specialists of the company unrolled in clinic a uniform corporate public key infrastructure (Public Key Infrastructure, PKI) based on own certification center Gazinformservice LLC accredited for rendering services for the benefit of the state information systems. For authentication of staff of clinic in a hospital system the certified eToken PRO smart cards with the built-in RFID tags were implemented. These protected devices are used in VTsERM for reliable storage of private keys of the electronic digital signature (EDS) necessary for conducting legally significant document flow. Also smart cards are applied as the corporate admission to an input on the medical institution territory. For personal data protection the certified solutions of the Secret Disk family of Aladdin R.D. company allowing to prevent unauthorized access to confidential information even at theft of the server are implemented. The project deadline made 6 months.

"The efficiency of treatment depends on the accuracy of the made diagnosis and quality of the picked-up treatment. The patient's life occasionally depends on the volume of diagnostic information and speed of its receiving by the doctor. Use of electronic medical records allowed us to accelerate information transfer between departments, to arrange access to clinical records, to increase quality of our service. Wide use of electronic medical records forced us to approach seriously a question of data protection, ‑ Mikhail Yuryevich Bakhtin, the associate director of VTsERM on medical information technologies reported. – Thanks to complex approach to the security which is successfully implemented by our partner Gazinformservice we solved a problem, very important for us, - observance of all necessary statutory requirements on personal data protection of patients and preserving of medical secrecy. It means that our patients can fully entrust us the most personal information – about the health".