Shopping cart 0
Standard

IEEE 11073-40102-2022

Published
Preview

Corrigendums and amendments are bought separately.

Language
Services

Abstract

Adoption Standard - Active. For Personal Health Devices (PHDs) and Point-of-Care Devices (PoCDs), a security baseline of application layer cybersecurity mitigation techniques is defined by this standard for certain use cases or for times when certain criteria are met. The mitigation techniques are based on an extended confidentiality, integrity, and availability (CIA) triad and are described generally to allow manufacturers to determine the most appropriate algorithms and implementations. A scalable information security toolbox appropriate for PHD/PoCD interfaces is specified that fulfills the intersection of requirements and recommendations from the National Institute of Standards and Technology (NIST) and the European Network and Information Security Agency (ENISA). A mapping of this standard to the NIST cybersecurity framework; IEC TR 80001-2-2; and the Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege (STRIDE) classification scheme is defined.

Document information

  • Standard from IEEE/ISO
  • Published:
  • Document type: IS
  • Pages
  • Publisher IEEE/ISO
  • Distributor IEEE/ISO
  • Technical Committee IEEE Engineering in Medicine and Biology Society / IEEE 11073 Standards Committee

Product Relations

  • Refers: and GMAC
  • Refers: NIST FIPS Publication 197, Advanced Encryption Standard (AES), NIST SP 800-38D, Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM)