Re: [Gnumed-devel] Time for a major re-think in 2005 - opinions

[catmat]

Karsten Hilbert wrote:

> > with audit trailing of table updates in gnumed,  what about the use
> > of signing with private keys , or other authentication /non-repudiation
> > mechanism ?
> >    
> The intention on my part was to do a clear-text dump (pg_dump)
> of the entire database and hash that, send the hashes to
> the notary servers and archive the dump along with the hashes
> signed by the notary (and the public key thereof).

does sound simpler, and one could only  subvert the audit between
dumps.
If an identity's record was exported to another system, what would be the
protocol for supplying a verified audit with the record?


> So, yes, writing code to facilitate that process would be very
> welcome. Note that this should be run in the background
> without any need for user interaction - it should not be part
> of the GnuMed *client*. It could even run entirely on the
> server.
>
> Karsten
>