Great partnerships are founded on common goals, shared mindsets, and mutual rewards

Alliances and partnerships not only enhance current comprehensive services but create an extended organization/community with latest technologies, best service offerings and solutions to meet the evolving needs of patient care. To ensure the best result, we select only those partners and alliances that add significant value to our solutions.

Through our partnership programme, medical facilities of all types and sizes have the ability to interface and integrate with the rest of the healthcare community, including practice management, laboratory and scheduling systems. Our objective is to improve communications, increase office efficiency and enhance workflow.


Technology Partners

RSA SecurID®

The RSA SecurID® authentication is the Strongest and Easiest to Use One Time Password Security Solution, there have been no reported security breaches of RSA SecurID® authentication in over 15 years. The token hardware is designed to be tamper-resistant to deter reverse engineering of the token. RSA SecurID® currently commands over 70% of the two-factor authentication market (source: IDC) and 25 million devices have been produced to date.

To protect your organization's most critical information assets, you need a security system that is second to none. RSA SecurID® authentication offers a unique, time-synchronous solution** that automatically changes the user's authentication code every 60 seconds using a built-in clock and the card's factory-encoded random key. This makes RSA SecurID® solution more secure than event-synchronous systems with passwords that can be valid for an indefinite period of time and easier to use than challenge-response systems that require multiple steps to generate a valid code.

What's more, RSA SecurID® authentication is built upon the Advanced Encryption Standard (AES**) algorithm, a recognized standard that is continuously scrutinized and challenged by cryptologists around the World to ensure its strength and dependability.


Remark

• Time synchronous authentication is an authentication method that relies on a timing value to authenticate the token bearer. All token authentication applications work with an input value from some source. The input value is encrypted according to some algorithm, using a key. The encrypted value is displayed as a one-time password that the token bearer types into a computer or other device to gain access. In time synchronous authentication, both the token, often called a hardware authenticator, and the server keep track of clock time. The clock time is the input value for the encryption process and it's encrypted with the seed record. The resulting value is entered as a one-time password at the login prompt. The server does the same computation in order to authenticate the token bearer.

• The Advanced Encryption Standard (AES) was introduced in 2000 after a long search by NIST for an encryption standard that would be hard to break, inexpensive to use, easy to implement and would work on both hardware and software. One of the two important factors that make an encryption standard hard to break is the encryption process (encryption algorithm). Theories can't accurately predict how easy it will be to break a particular algorithm, so NIST published a few contenders and experts all over the world tried to break them. The second factor in making an encryption standard hard to break, especially a standard based on symmetric key cryptography, or a shared secret, is the key length. In general, the longer the key, the harder it is to figure it out by just trying random strings of characters. The AES can use a key length of 128, 192 or 256 bits. The algorithm to be chosen also had to be made available to the public without royalty fees. After years of testing and multiple ems cycles, the Rijndael algorithm, written by two Belgium cryptographers, was adopted as the AES and was published as FIPS 192. There is an inherent weakness in a symmetric key process because the key has to be transferred from the sender to the receiver as well as the encrypted text. Frequently, AES is used as part of a set of encryption tools where an asymmetric encryption method is used to transfer the key.

HackerGuardian Daily Vulnerability Scanning

HackerGuardian Daily Scanning is an automatic daily vulnerability testing service that simulates a concentrated intrusion attempt on a specific web server. Every 24 hours, HackerGuardian run a huge range of vulnerability tests to identify any potential weaknesses and security holes that a hacker might exploit. After a clear scan, a website is certified as secure and will display the HackerShield TrustLogo™.

HackerGuardian Daily Vulnerability Scanning, certifying a site is free from hackers.

Sites displaying the HackerShield Trust Logo are daily tested and certified as secure to the highest industry standards.

Website customers get immediate reassurance with real-time, point to verify delivery of their security credentials.

The facts about SSL certificates

Use a digital certificate

To prove the web hosting company's (or the web server's) identity online and in so doing create a sense of trust and confidence in using the web site.

To offer protection of the data submitted to the web site (or between servers) through the use of encryption. Should any information be intercepted, it will be unintelligible without the unique key used for decryption.

Strength of a certificate

The encryption strength of a digital certificate is determined by the level of encryption supported by the browser used to connect to a web site and the server where the web site resides. This means that users may connect at 40-bit, 56-bit or 128-bit depending on the browser version they are using.

Most digital certificates function in this way – providing encryption at a strength supported by the browser and server. It is important to understand this distinction as many CAs promote their certificates as 128-bit when in fact they will support sessions of varying encryption strength (128-bit being the strongest possible level of encryption).

In the past, legislation of the United States government prevented the export of 128-bit encryption technology. The result of this was the creation of the so called “export” browser versions which were restricted to 40-bit and 56-bit encryption capabilities. These browsers were distributed outside of the United States for many years and were even downloaded by US based users. In 1997, the US government repealed its ban on 128-bit encryption. Today however, there are still significant numbers of export version browsers in use, mainly internationally but also in the United States.