Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I have a server set up with medical files in a Access database. I am taking over this job from an existing guy who has vanished, so I don't know all the details of the system. I can find out specific details as needed.

It is currently set up so that the local area network has access to the database file. However sometimes the doctor on call might be called out at 2 in the morning and need to check the patient data.

I have two ideas at present:

  • Use VNC to login to a dedicated computer in the office.
  • Use Hamachi to simulate having the doctor's computer in the office.

Is there a good reason why either or both of these plans is a a really bad idea? Is there a good way to do this from inside Access?

share|improve this question
2  
Are you required to be HIPAA compliant? –  Vineet Reynolds Jun 2 '11 at 2:10
    
Both those plans are bad ideas, because there's no good way to use Access ;) –  AviD Jun 6 '11 at 23:48

1 Answer 1

up vote 5 down vote accepted

If you don't have details of the existing system, using a VPN is likely to be the simplest route. This way you can not only use the required level of authentication (depending on your country this may vary, but accessing patient data usually requires strong authentication, logging etc) but also mean you don't need to alter the existing application.

VNC or Hamachi can be very useful to make it simple for the doctor, but from a security perspective it's the tunnel/VPN that you communicate through which you want to concentrate on.

share|improve this answer
    
What's a good VNP? –  Tyr Jun 3 '11 at 3:17

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.