Don't F it up
summary
Claims that encrypting PHI with client-side keys stops most breach disasters and meets HIPAA technical safeguards, citing >$25M in HHS fines, a 6M-record Elasticsearch leak and research that ~80% of breaches come from misconfiguration or third-party failure. Uses Apple HealthKit plus a high-level open-source virtual crypto library to implement end-to-end encryption and data signing, shows a working macOS/iOS demo that encrypts, verifies signatures, supports group keys, and proves nondeterministic ciphertexts change each encrypt.
AI-written summary · about
chapters (16)
- 0:00Start
- 0:54Storage Transmission Passwords
- 1:21Security? Cryptography? Regulations?
- 2:57Electronic Protected Health Information
- 3:22Policies Tracking
- 3:46Recent Examples
- 5:29WELLPOINT
- 7:41Securing the perimeter
- 13:37iOS Application
- 17:48Encryption Message Body Signature
- 19:04Database Compromises
- 19:28Brute-force
- 26:09Medical treatment
- 26:27Medical research
- 26:42User consent Secure storage
- 27:21Questions?
related talks
06mKeynote: Evolutions in data privacy: threats and opportunities
43mSecurity in FHIR
18mSecuring PHI in the cloud: Best practices in AWS environments
51mKeynote: Data is a new security boundary
16mSecurity, Fraud, and Compliance
52mPrivacy & Security, Policy & Technology
06mProtecting PHI in Machine Learning Development Environments
50mSecuring IoT Data with Pervasive Encryption