Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@couchdb.apache.org
Received-SPF: neutral (nike.apache.org: local policy)
MIME-Version: 1.0
In-Reply-To: <4EAF56B3.6080601@thewordnerd.info>
References: 
 <CAN-r7Dy5nO8AMU2Z6PrRgG9P9bhj3Mr8bDQ-XusUvYKwTYo=qA@mail.gmail.com>
 <CAHdjip+BnkatrtH7sO0_qqmZ5=qx-HN9Tk9UBMvaKGANgCmXuw@mail.gmail.com>
 <CAF+m3ta1zvCcG7jx=vv=Sf5YV5cNEj_tXWg1ZgXpRP8HG7ws=Q@mail.gmail.com>
 <4EAF56B3.6080601@thewordnerd.info>
From: Cory Zue <czue@dimagi.com>
Date: Tue, 1 Nov 2011 09:48:17 -0400
Message-ID: 
 <CAF+m3tY6bitSRn4ad384fCXX1=EuEH91hvPGssRf4tDGe1YK0w@mail.gmail.com>
Subject: Re: Health care software utilizing CouchDB
To: user@couchdb.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On Mon, Oct 31, 2011 at 10:17 PM, Nolan Darilek <nolan@thewordnerd.info> wr=
ote:
> What encrypted volume are you using?

Ecryptfs. [1]

We've had pretty solid performance with it, although haven't yet
reached the scale where we might have to worry more about performance.
The major downside is that you need to manually mount the drive in the
case of a reboot which can be problematic if people with the
credentials aren't around. This is only a small piece of the HIPAA
puzzle, but does provide the "encrypted at rest" and "protection if
the server walks away" bits.


[1] https://help.ubuntu.com/11.04/serverguide/C/ecryptfs.html


>
> I'm actually not using CouchDB (I had an app based on MongoDB) but the No=
SQL
> solutions seem to be lagging behind in things like database encryption. I
> wanted to go with the encrypted volume approach, but finding one that is =
up
> to HIPAA/HITECH spec was confusing for someone running a small business
> targeting a niche market of mostly solo practitioners.
>
>
> On 10/31/2011 02:43 PM, Cory Zue wrote:
>>
>> My organization supports many healthcare applications on CouchDB
>> including multiple that are HIPAA compliant. We store our entire
>> database on an encrypted volume and setup ssh-tunnels for encrypted
>> replication. We have found that the schemalessness of couch is a big
>> win when dealing with health protocols and systems.
>>
>> Cory
>> --
>> Cory L. Zue
>> Dimagi, Inc
>> http://www.dimagi.com/
>>
>>
>>
>> On Mon, Oct 31, 2011 at 3:06 PM, Alexander Shorin<kxepal@gmail.com>
>> =A0wrote:
>>>
>>> On Mon, Oct 31, 2011 at 7:38 PM, Manor Lev-tov<manorlevtov@gmail.com>
>>> =A0wrote:
>>>>
>>>> Hello,
>>>> I was curious if anyone here has experience or knows of any company th=
at
>>>> has written an electronic medical record system or any other health ca=
re
>>>> related software using CouchDB as the data store?
>>>> Thanks,
>>>> Manor
>>>>
>>> Working on frond-end for Laboratory Information System based on
>>> CouchDB. Front-end includes: application server, reports, data
>>> collaboration, point of integration with other companies etc. It
>>> perfectly fits to these tasks and could even more (e.g. mobile client
>>> that allows you, as patient, to access your analysis result
>>> everywhere). No success story yet, but all works fine for now(:
>>>
>>> --
>>> ,,,^..^,,,
>>>
>
>