1. PKI Forum Business Panel March 6, 2000 Dr. Ray Wagner Sr. Director, Technology Research

2. Digital Medical Systems DMS provides infrastructure solutions to enable healthcare application service providers (ASPs). Our trust based infrastructure can provide out of the box regulatory compliance which is an issue for all organizations wanting to leverage the Internet in Healthcare. Security is not a technology - it is a culture.

3. Products & Services Business Services Transaction & Data Services Infrastructure Facilities Interactive Services Security / Business Policy & Services System Management Workflow / Authorizations Data Repository /Trans. Mgmt. OLAP+OLTP / Identity Mgmt. Web Servers / Authentication Arch. PMI / Directory Services ContentCommunicationCommerceCommunity Portal View Clinical Mgmt. Disease Mgmt. InsuranceEMR “Active” WEB View

4. Healthcare Business Drivers Drive to the Web The bottom line Privacy and security concerns Lack of expertise Pending Governmental Regulations (HIPAA, DHHS)

5. HIPAA Requirements Strong authentication Access validation Expanded audit trails Electronic record authentication Denial of service prevention Physical security and disaster recovery Protection of external remote access points Protection of external communications Software discipline Systems assessment Security and confidentiality practices ISOs Education and training Sanctions Key management, certificate revocation, key recovery Individual non-repudiation

6. PKI Issues Vendor Interoperability Fine-grained cross-certification tools Collaboration in support of vertical market root CAs Support of industry specific standards of operation for PKI implementations and certificate issuance Strong key management PKI integration with enterprise-wide directories

7. Raymond R. Wagner, Jr., Ph.D. Sr. Director, Technology Research O 615-665-6312 http://www.digitalmedical.com RWagner@digitalmedical.com

8. Members Meeting March 6-8 2000