Security

echoBase's Resonate product is built on DoD-proven integration technologies. This architecture of a secure, central data repository, providing a unified interface to multiple applications, has provided data portability, security, and system integration for systems managing classified data in Department of Defense programs for decades. Resonate leverages this same model along with best practices and various security technologies to provide maximum privacy for personal healthcare information. echoBase is the exclusive provider of PDM (Patient Data Management) technology, bringing this new paradigm from defense into the healthcare industry.

• Resonate security exceeds HIPAA, HITECH, and Meaningful Use guidelines.
  • Data in transit is encrypted via SSL or TLS at all times.
  • Data at rest is encrypted via AES-256; keys are not stored at all.
  • Mobile device memory is deallocated in a secure fashion.
  • Comprehensive audit trail, including logging of successful read activity by authorized personnel, provides 100% access traceability.
• Highly available patient records – Multi-tier caching combined with a hot standby capability on the server ensures maximum availability.
• Comprehensive audit trail - All data access is logged, including successful reads by authorized users, providing the best data possible for internal and external audits.

Onboard Data Storage - No current healthcare regulation, including HIPAA and HITECH, prohibits the storage of data on a mobile device or describes any encryption requirements whatsoever.

Resonate employs AES-256 encryption for all data stored on the mobile device.  AES-256 is approved by the NSA for data classified up to Top Secret.

The most effective attack vector against AES-encrypted data is an exhaustive key search (brute force attack). It would take 10,000 machines, each as powerful as the most powerful supercomputer in the world (IBM's Blue Gene) more than 3 x 10⁵¹ years, or roughly 2.18 x 10⁴¹ times the estimated age of the universe, to break an AES-256 encrypted database by brute force, therefore it is considered to be unbreakable.

For more information about Resonate, please contact us.