A hospital network requires attending physicians to electronically sign controlled substance prescriptions. The security engineering team mandates the use of asymmetric key digital signatures on hardware security tokens rather than hash-based message authentication codes (HMACs) utilizing a shared key between the hospital system and the pharmacy portal. Which of the following primary security concepts explains why asymmetric digital signatures are required for this deployment?
- Non-repudiation, because the private key is uniquely held by the individual physician, preventing them from denying that they issued the prescription.Cevap
- BIntegrity, because symmetric HMAC algorithms cannot detect unauthorized alterations made to the prescription payload during transit.
- CConfidentiality, because asymmetric signing encrypts the prescription payload to prevent unauthorized eavesdropping by intermediate nodes.
- DAuthorization, because hardware tokens grant role-based access permissions to prescribe restricted medical substances.
Cevap
Non-repudiation, because the private key is uniquely held by the individual physician, preventing them from denying that they issued the prescription.
Asymmetric digital signatures provide non-repudiation because the signing key (private key) is uniquely held by a single individual. Unlike symmetric HMAC mechanisms where multiple endpoints share the same key and either could generate a valid message authentication code, asymmetric signatures cryptographically bind the action to one specific key holder.
Adım Adım Çözüm
Anahtar Kavram
Non-repudiation via Asymmetric Digital Signatures
Tahmini Süre:1m 30s