Security and architecture
Security controls
The controls implemented in the pilot and the controls designed for production.
Sign-in, MFA and sessions (15)
How staff sign in and how sessions are protected.
- How do staff sign in to the pilot? Pilot
- Is multi-factor authentication available? Pilot
- Will hardware security keys be supported? Designed
- What happens after repeated wrong passwords? Pilot
- Does the screen lock when a clinician walks away? Pilot
- Can a user see and end their sessions? Pilot
All 15 answers in this section →
Roles and permissions (13)
The role roster, tiers and deny-by-default access.
- How many roles does AuroraMed define? Pilot
- Is access deny-by-default? Pilot
- Can a role's title differ from its permissions? Pilot
- Can a manifest grant a low tier a sensitive permission? Pilot
- Can security staff read charts? Pilot
- Who can read the audit log? Pilot
All 13 answers in this section →
Encryption and key management (10)
What is encrypted, with what, and who holds keys.
- Is sensitive data encrypted in the pilot? Pilot
- Which algorithms does the production design use? Designed
- Are keys ever visible to administrators? Designed
- What if a key is lost? Designed
- How often are keys rotated? Open
- Is post-quantum cryptography planned? Designed
All 10 answers in this section →
Audit and tamper evidence (10)
What is logged, how tampering is detected, and its limits.
- What does the audit log record? Pilot
- Can the audit log be edited? Pilot
- Will audit records be anchored outside the database? Designed
- Is there an immutable copy of the audit log? Designed
- Can a patient see the access history for their record? Designed
- Does the audit log store patient data? Designed
All 10 answers in this section →
Network, hardware and physical security (14)
The closed-loop site, sealed terminals and physical controls.
- What does a closed-loop server mean for hackers? Designed
- What is a sealed thin-client terminal? Designed
- Can a lost tablet leak patient data? Designed
- Do the screens stop someone photographing them? Designed
- Are USB ports a risk? Designed
- What if someone opens a terminal? Designed
All 14 answers in this section →
The federated ledger (13)
Spheres, bridges, tokens, wallets and quorum.
- What is a sphere? Designed
- What is a bridge? Designed
- Which token types exist? Open
- Is this a cryptocurrency? Designed
- How many approvers does a sensitive action need? Open
- What are mintable wallets? Designed
All 13 answers in this section →
Transfers, sync and limiters (11)
Three-stream transfer, cloud sync and the read limiter.