A healthcare organization requires that when physicians approve electronic prescription orders, the system must generate proof of origin so that a physician cannot later deny authorizing the order. To accomplish this, the system applies a digital signature using the physician's private key combined with a cryptographic hash of the order details. Which security concept is directly fulfilled by implementing digital signatures to prevent denial of origin?
- Non-repudiationAnswer
- BIntegrity alone
- CAuthorization
- DSymmetric confidentiality
Answer
Non-repudiation is the primary security goal achieved, as digital signatures bind an identity to a specific transaction using asymmetric cryptography so the sender cannot deny authorizing it.
The correct concept is non-repudiation. Digital signatures combine asymmetric cryptography (signing with the sender's private key) and cryptographic hashing to provide both authenticity of origin and data integrity. Because only the physician possesses their private key, they cannot claim a signed order was generated by someone else.
Step-by-Step Solution
Key Concept
Non-repudiation and CIA Triad