4 ms·
I worked for a company that had a large amount of HIPAA data on Amazon's EC2 platform. We did significant encryption (including field-level encryption) on the
by tednaleid 15y ago
I worked for a company that had a large amount of HIPAA data on Amazon's EC2 platform. We did significant encryption (including field-level encryption) on the data to help mitigate security concerns.
We were able to pass security inspections by 4 fortune 500 health companies with this model (though a couple of them needed significant hand-holding).
It made querying that data a pain in the ass because you couldn't do a SELECT ... WHERE <encrypted field> = 'foo' as the data wasn't encrypted client side.
One cool thing about datomic is that the query engine runs client side, so it can also invoke client side methods as part of the query. This means that if you had encrypted data in your store, that it could be trivially decrypted client-side and you could potentially get the full expressiveness of the language to work with your data.
- siavosh 15y agoThanks for the info. Just curious were the encryption keys stored on EC2 as well? Dataomic client/peer model is definitely interesting.
- tednaleid 15y agoThey were, but not on the same nodes as the data was on. They were in a different AWS security zone with different ssh keys/access privileges.