Javier,
I agree with your synopsis. The file system on a server should provide
the mechanism that protects the security of the data to meet the sufficiency
of the HIPAA. I would expect the adoption of disk storage as opposed to
BLOB storage to be the rule, rather than the exception in the database
community, regardless of vendor.
RBase's ability to generate encrypted PDFs adds an additional measure of
securing the data.
----- Original Message -----
From: "Javier Valencia" <[email protected]>
To: "RBASE-L Mailing List" <[email protected]>
Sent: Wednesday, March 11, 2009 2:36 PM
Subject: [RBASE-L] - Re: Saving PDFs to Database
In principle, I agree that the simplest way would be to store the PDF
reports within an R:Base database; however, 2 issues come to mind.
First, as you know, the R:Base created PDF files tend to be large and, if
thousands need to be stored, it will likely exceed the 2 Gb file size
limit
(ask me how I know this).of course, V8 or newer versions would not have
this
limitation.
Second, when backing up the system, the majority of the data you are
backing
up is data that has gone unchanged and will not change; the storage of
these
large files might present a problem. When you use external files, you can
do
sequential backup that include only the new files.
A system could be created that stores encrypted/password protected PDF
files
in a password protected directory that can be accessed using only valid
passwords. The database would store the name and location of the file as
well as the password to decrypt the file.
Javier,
Javier Valencia
913-915-3137
_____
From: [email protected] [mailto:[email protected]] On Behalf Of Bill
Downall
Sent: Wednesday, March 11, 2009 1:00 PM
To: RBASE-L Mailing List
Subject: [RBASE-L] - Re: Saving PDFs to Database
Each provider, usually with their own lawyers and risk management people,
interprets the law and decides how to implement appropriate protections.
I'm with Tom. A lot fewer people are self-taught at hacking an R:BASE
Grant-Revoke protected, encrypted database, than are self-taught at
hacking
the Windows file system.
Bill
On Wed, Mar 11, 2009 at 1:52 PM, MDRD <[email protected]> wrote:
But the VA lost a HD with all the doctors info on it?