module 2
Module 02 Course Project - PII Fields and Symmetric Ciphers
MedicalWise is implementing a text message feature of your medical information. To begin this implementation, process a determination of risk needs to be made for this application. You will need to determine the appropriate level of cryptography can be used for this application.
To assist you in this determination, an email has been forwarded from the CIO of MedicalWise detailing their requirements:
From: MedicalWiseCIO@medicalwise.org
To: Cryptographyexperts@securityintelligence.org
Subject: Medical Record Information
After a recent meeting, it has been discussed that individuals would like text messages about their medical information. Below are the required action items that will need to be reviewed for the text feature function.
1. Requirements
2. Android supported version 8.1 Oreo or higher
3. iPhone supported version 12.0 or higher
4. First and Last name
5. Birthday
6. SSN last four
7. Mobile number
8. Address
9. Facility name
10. Phone lock - pin number, fingerprint, iris, or any other feature that is able to lock phone
11. Registration:
12. Via mobile phone
13. Authentication process text message with code time limit 5 minutes
14. Secure Wi-Fi connection
Assignment Details
For this week’s course project assignment, address the following elements:
· An explanation of PII (Personally Identifiable Information).
· A list of the data fields used based on the information disclosed in the CIO email message.
· Identification of PII fields.
· Using the risk matrix in this week’s lecture, include the risk level for this application.
· An assessment of whether symmetric Ciphers are the BEST solution. Include at least one paragraph for each of the following sections.
· A description of practical stream ciphers.
· An analysis of DES and alternatives. Provide a comparison of the benefits and shortcomings of the following Symmetric ciphers: DES, 3DES, AES.
Submit your completed assignment by following the directions linked below. Please check the Course Calendar for specific due dates.
Save your assignment as a Microsoft Word document. (Mac users, please remember to append the ".docx" extension to the filename.) The name of the file should be your first initial and last name, followed by an underscore and the name of the assignment, and an underscore and the date. An example is shown below:
Jstudent_exampleproblem_101504