taskGNU Health - Tasks: task #13190, Health crypto module functionality


You are not allowed to post comments on this tracker with your current authentication level.

task #13190: Health crypto module functionality

Submitted by:  Luis Falcon <meanmicio>
Submitted on:  Fri 02 May 2014 08:48:03 AM UTC  
Should Start On:  Fri 02 May 2014 12:00:00 AM UTC Should be Finished on:  Sun 06 Jul 2014 12:00:00 AM UTC
Category:  Functionality Priority:  5 - Normal
Status:  Done Privacy:  Public
Percent Complete:  100% Assigned to:  Luis Falcon <meanmicio>
Open/Closed:  Closed Release:  2.6.0
Module:  health_crypto

( Jump to the original submission)

Mon 26 May 2014 06:52:47 PM UTC, comment #7: 

Update :

Document Digital signature verification process.

Luis Falcon <meanmicio>
Project AdministratorIn charge of this item.
Thu 22 May 2014 12:37:20 PM UTC, comment #6: 

Update :

Store the generated digital signature in the document.

Luis Falcon <meanmicio>
Project AdministratorIn charge of this item.
Wed 21 May 2014 10:32:30 AM UTC, comment #5: 

Initial Tryton client plugin for GNU Privacy Guard integration.

-  Method for Digital signature (clearsign) of document digest.

Luis Falcon <meanmicio>
Project AdministratorIn charge of this item.
Mon 19 May 2014 11:33:38 AM UTC, comment #4: 

Document integrity verification on digest in place . Side-by-side comparison of the flattened document when hashes differ.

Functionality can be seen on the prescription order model.

Luis Falcon <meanmicio>
Project AdministratorIn charge of this item.
Wed 07 May 2014 08:46:16 PM UTC, comment #3: 

Update :

- The document serialization and message digest general concepts are now in place in the prescription model. 

@Chris :The public-key (asymmetric) signing process on the message digest would probably be done best via a GPG[1] plugin on the Tryton client.

The public key of each user can reside on the res_user model, but the institution could opt for a key server .

For the private key part, it's the user responsibility and organization policies where to safely store it.

Suggestions are most welcome.


1.- https://www.gnupg.org/

Luis Falcon <meanmicio>
Project AdministratorIn charge of this item.
Wed 07 May 2014 12:38:32 AM UTC, comment #2: 

For the public key infrastructure, are you thinking that each organization would host some sort of key/authentication server? Or use the wider gpg key servers already available? Store them in tryton? Or something else?

I'm just thinking about the possible ways to do some sort of public key/asymmetric crypto when workers are moving from computer to computer, multiple workers per computer, and other issues.


Chris Zimmerman <teffalump>
Project Member
Mon 05 May 2014 08:01:37 PM UTC, comment #1: 

A quick update :

  • Main health_crypto module and class created
  • Document data serialization
  • JSON formatting
  • Use of SHA-2 (512) hash for the message digest

I'm now putting these concepts into the e-Prescription functionality.

Luis Falcon

Luis Falcon <meanmicio>
Project AdministratorIn charge of this item.
Fri 02 May 2014 08:48:03 AM UTC, original submission:  

Dear all

A short summary of the module that I'm working for GNU Health :

The health_crypto module will provide the following functionality :

  • Document Serialization
  • Document hashing (MD)
  • Document signing
  • Document verification
  • Document encryption

The module will work on records from models that will need this functionality such as prescription, patient evaluations, surgeries or lab tests.

The Serialization process  will include the information in a predefined format (JSON) and encoding (UTF8).

There will be a field that will contain the Message digest of the serialization process, and that will check for any changes.

The signing process will be upon that Message Digest field, whereas the encryption process will work on row or column level.

Public key / asymmetric cryptography will be used for signing the documents. For encryption we can choose whether to use a symmetric algorithm.

Comments / suggestions are most welcome.

Luis Falcon

Luis Falcon <meanmicio>
Project AdministratorIn charge of this item.


No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by teffalump (Posted a comment)
  • -email is unavailable- added by meanmicio (Submitted the item)

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.




    Follow 12 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2014-08-05 meanmicio StatusIn Progress => Done
        Percent Complete70% => 100%
        Open/ClosedOpen => Closed
        Release2.5.0 => 2.6.0
    2014-05-26 meanmicio Percent Complete60% => 70%
    2014-05-22 meanmicio Percent Complete50% => 60%
    2014-05-21 meanmicio Percent Complete20% => 50%
    2014-05-19 meanmicio Percent Complete10% => 20%
    2014-05-03 meanmicio Should be Finished on2014-05-02 => 2014-07-06
    2014-05-03 meanmicio StatusNone => In Progress
        Percent Complete0% => 10%
        ReleaseNone => 2.5.0

    Back to the top

    Powered by Savane 3.7