Facilities
Computer facilities available at MTPPI include access to a closed network. The NT network provides the access to the Internet, email support and the facility to share data among restricted groups of staff members. Our network security starts from authenticating any user. Once authenticated, firewall enforces access policies such as what services are allowed to be accessed by the network users. The system administrator monitors an intrusion prevention system (IPS) helps detect and prevent computer worms and virus from being transmitted over the network. IPS also monitors for suspicious network traffic for contents, volume and anomalies to protect the network from attacks such as denial of service. Patient level data is stored on our secure server protected by multi layered access control via smart cards, encryption, and password system to ensure only authorized user access. Access logs are kept ensuring that the data within the system has not been changed or erased in an unauthorized manner. Data corroboration, including the use of check sum, double-keying, and message authentication, are used to ensure data integrity. In order to ensure data security the weekly backup of data are protected by private-key encryption. The systems administrator provides technical support to maintain MTPPI's network and computers. Also documentation of security policies, procedures and access records, information technology record of all configuration settings on the components of the network are kept and maintained.
Equipment:
Dell Poweredge Server (data storage/application)
CPU: Intel Xeon 3gz
RAM: 2gb
Storage: 2 x 300gb 3 x 160gb in raid 1
OS: SUSE Enterprise 10
Network: duel Intel pro network adapter
Dell Poweredge Server (Internet/email/print/file/NetWare)
CPU: Intel Xeon 3gz
RAM: 2gb
Storage: 2 x 120gb raid 1
OS: Red hat
Network: Intel pro network adapter
SonicWALL TZ 170 Internet Security Appliance (firewall)
1 x IP Cop Firewall (remote access)
1 x secondary email server
5 x PC Desktops(windows 2000, XP pro, user machine)
2 x thin client (access data server)