You only need this device when connecting via the PSTN (an ordinary phone line) If you use ISDN the automatically provides strong authentication via CHAP/CLI (Challenge Handshake Authentication Protocol/Caller line Identification). IN GPnet practice will connect by ISDN so you wont need lots of expensive smart cards when connecting from your practice.
The NHSnet code of connect is being reviewed and this may eventually remove the requirement for strong authentication when accessing the network. However, a requirement for strong authentication will rightly still remain when accessing sensitive applications containing patient data.
-------------------------------------------------------------------------------------------------
Ewan Davis Also at [log in to unmask] - PGP key available from ldap://certserver.pgp.com
Work Phone numbers - Voice +44 (1) 527 579414 Fax +44(1)527 833188
Chairman AAH Meditel ,Peak Systems, PharMed, CSSA Primary Care Group
-----Original Message-----
From: David Evans [SMTP:[log in to unmask]]
Sent: Wednesday, November 25, 1998 8:14 PM
To: [log in to unmask]
Subject: Re: NHS Net SMTP problems are being worked on
Far from impressing me, I think it is a pain in the neck. We've just
been given a PC and one of these gizmos as part of the pilot scheme to
get welsh GPs on our version of the NHS net (Cymru Web). The gadget
has an LCD screen with a number which changes every 60 seconds. This
is synchronised with the server so you can type it in as part of your
password when you log on. This means that you have to have the gadget
physically in your hand when you dial in. We were given one free, but
any more cost 50ukp each. If and when we have a network of PCs in the
surgery this means we will either have to fork out 450ukp for 9
gadgets or run round borrowing it off each other to dial in. At the
moment we only have one PC with a modem, but there is still a problem
if one of us wants to dial in from home.
Obviously the gadget makes the system more secure, but there is always
a trade off between security and ease of access and I think they've
got the balance wrong. I'm sure the IT managers who run Cymru Web
would be happiest if no NHS staff could connect at all - then it would
be really secure!!
David
---------------------------------------
Dr David Evans
Cardiff
[log in to unmask]
|