Transcript ADSL Connection to hospitals Simon Harden

Simon Harden, Director Information Systems
ADSL & VPNs
ADSL- Virtual Private Network Connection
for Home Viewing, Conforming to the NHSIA
Code of Connection
25th March, 2004
ADSL & VPNs
N3 – serving the health community
N3
ADSL
Acute trust
PCT
Community
site
GP
Social services
Pharmacists
Dentists
Prison services etc.
25th March, 2004
Connect over local LANs
and WANs or direct to N3
as appropriate
N3
ADSL & VPNs
•BT managed service
•18,000 connections
•Starts April 16th
•NPfIT requirements fully funded (PACS?)
•Home workers locally paid for
•ADSL mentioned as existing service
•VPNs part of core service
25th March, 2004
Initials
ADSL & VPNs
Asynchronous Digital Subscriber Line
•512Kb – 2Mb
•Who is ISP?
Virtual Private Network
•As if on main network
•Encrypted
25th March, 2004
Broadband Connections
•DSL (512Kbs upwards)
•ISDN (128Kbs upwards)
•Satellite (what you pay for)
•3MB image:
•56Kbs modem – 6.5m
•128Kbs – 3+m
•512Kbs - 48s
•2Mbs - 12s
25th March, 2004
ADSL & VPNs
What’s the Problem?
•Data Protection Act
•Caldicott confidentiality rules
•NHSnet Code of Connection
•Patient history
25th March, 2004
ADSL & VPNs
Public ADSL
ADSL & VPNs
•Secure ID token or biometrics
•Firewall with NHSIA approved rules
•VPN to NHSIA standards
•Independent penetration testing
•NHS owned and managed PC
•Firewall on PC
•Adapted security policy
25th March, 2004
Private ADSL
ADSL & VPNs
•Talk to NHSIA
•ADSL
•IP Central
•Dedicated line at home
•Simplifies some of the security
•Can also be used for
•Small remote sites
•Teleradiology between sites
•Will be superseded eventually by N3
25th March, 2004
Practical Tips
ADSL & VPNs
•Talk to local NHSnet security manager
•Shared portables
•Citrix for client
25th March, 2004
Picture
ADSL & VPNs
In Trust but insecure
ADSL
‘modem’
VPN connection
& encryption
Home
Firewall
In Trust and secure
NHSnet connection
25th March, 2004
Trust network
Links
ADSL & VPNs
General Security Guidance
http://nww.nhsia.nhs.uk/security/pages/syops/default.asp
NHSnet Code of Connection
http://nww.nhsia.nhs.uk/security/pages/syops/docs/coc.asp
Rules For Broadband Access
http://nww.nhsia.nhs.uk/nhsnet/pages/connecting/standards/default
Use of consumer broadband to Access NHSnet over the Internet
http://nww.nhsia.nhs.uk/nhsnet/pages/using/suppliers/vpn_trials.asp
N3
http://www.n3.nhs.uk
25th March, 2004