taskGNU Health - Tasks: task #13190, Health crypto module functionality


You are not allowed to post comments on this tracker with your current authentication level.

task #13190: Health crypto module functionality

Submitter:  Luis Falcon <meanmicio>
Submitted:  Fri 02 May 2014 08:48:03 AM UTC
Should Start On:  Fri 02 May 2014 12:00:00 AM UTC Should be Finished on:  Sun 06 Jul 2014 12:00:00 AM UTC
Category:  Functionality Priority:  5 - Normal
Status:  Done Privacy:  Public
Percent Complete:  100% Assigned to:  meanmicio
Open/Closed:  Closed Release:  2.6.0
Module:  health_crypto Component:  None

( Jump to the original submission )

Mon 26 May 2014 06:52:47 PM UTC, comment #7: 

Update :

Document Digital signature verification process.

Luis Falcon <meanmicio>
Group administrator
Thu 22 May 2014 12:37:20 PM UTC, comment #6: 

Update :

Store the generated digital signature in the document.

Luis Falcon <meanmicio>
Group administrator
Wed 21 May 2014 10:32:30 AM UTC, comment #5: 

Initial Tryton client plugin for GNU Privacy Guard integration.

-  Method for Digital signature (clearsign) of document digest.

Luis Falcon <meanmicio>
Group administrator
Mon 19 May 2014 11:33:38 AM UTC, comment #4: 

Document integrity verification on digest in place . Side-by-side comparison of the flattened document when hashes differ.

Functionality can be seen on the prescription order model.

Luis Falcon <meanmicio>
Group administrator
Wed 07 May 2014 08:46:16 PM UTC, comment #3: 

Update :

- The document serialization and message digest general concepts are now in place in the prescription model. 

@Chris :The public-key (asymmetric) signing process on the message digest would probably be done best via a GPG[1] plugin on the Tryton client.

The public key of each user can reside on the res_user model, but the institution could opt for a key server .

For the private key part, it's the user responsibility and organization policies where to safely store it.

Suggestions are most welcome.


1.- https://www.gnupg.org/

Luis Falcon <meanmicio>
Group administrator
Wed 07 May 2014 12:38:32 AM UTC, comment #2: 

For the public key infrastructure, are you thinking that each organization would host some sort of key/authentication server? Or use the wider gpg key servers already available? Store them in tryton? Or something else?

I'm just thinking about the possible ways to do some sort of public key/asymmetric crypto when workers are moving from computer to computer, multiple workers per computer, and other issues.


Chris Zimmerman <teffalump>
Group Member
Mon 05 May 2014 08:01:37 PM UTC, comment #1: 

A quick update :

  • Main health_crypto module and class created
  • Document data serialization
  • JSON formatting
  • Use of SHA-2 (512) hash for the message digest

I'm now putting these concepts into the e-Prescription functionality.

Luis Falcon

Luis Falcon <meanmicio>
Group administrator
Fri 02 May 2014 08:48:03 AM UTC, original submission:  

Dear all

A short summary of the module that I'm working for GNU Health :

The health_crypto module will provide the following functionality :

  • Document Serialization
  • Document hashing (MD)
  • Document signing
  • Document verification
  • Document encryption

The module will work on records from models that will need this functionality such as prescription, patient evaluations, surgeries or lab tests.

The Serialization process  will include the information in a predefined format (JSON) and encoding (UTF8).

There will be a field that will contain the Message digest of the serialization process, and that will check for any changes.

The signing process will be upon that Message Digest field, whereas the encryption process will work on row or column level.

Public key / asymmetric cryptography will be used for signing the documents. For encryption we can choose whether to use a symmetric algorithm.

Comments / suggestions are most welcome.

Luis Falcon

Luis Falcon <meanmicio>
Group administrator


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by teffalump (Posted a comment)
  • -email is unavailable- added by meanmicio (Submitted the item)

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.




    Follow 12 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2014-08-05 meanmicio StatusIn Progress Done
        Percent Complete70% 100%
        Open/ClosedOpen Closed
        Release2.5.0 2.6.0
    2014-05-26 meanmicio Percent Complete60% 70%
    2014-05-22 meanmicio Percent Complete50% 60%
    2014-05-21 meanmicio Percent Complete20% 50%
    2014-05-19 meanmicio Percent Complete10% 20%
    2014-05-03 meanmicio Should be Finished on2014-05-02 2014-07-06
    2014-05-03 meanmicio StatusNone In Progress
        Percent Complete0% 10%
        ReleaseNone 2.5.0

    Back to the top

    Powered by Savane 3.11