New Web Browser Security Requirements

Effective September 1, 2016; New Web Browser Security Requirements

Web Browsers and Systems are Required to Support TLS 1.2

The Drug Enforcement Administration (DEA) is advising all DEA registrants of pending changes to DEA’s Office of Diversion Control websites.

The United States Computer Emergency Readiness Team, the National Institute of Standards and Technology, and the Payment Card Industry Security Standards Council recommend that users, including Federal agencies, upgrade their browsers and systems to software supporting Transport Layer Security (TLS) version 1.2 or higher. The DEA will comply with this recommendation in order to ensure protection of data transmitted through DEA-owned information technology infrastructure.

After August 31, 2016, all users are required to utilize browsers with TLS version 1.2 or higher when accessing DEA Office of Diversion Control websites. You may need to update your operating system and/or internet browser to continue to access these sites.

The largest population of users expected to be impacted by this change are users implementing unsupported versions of the Windows operating system (Vista and earlier versions) and those using Internet Explorer Version 9 or earlier. Other browsers and operating systems may be affected — check with the software manufacturer to make certain that TLS 1.2 is supported and enabled on your system.

One Time Passwords for EPCS/DEA Prescription Orders

ADL Data has added Onetime Passwords to their Electronic Prescribing software. This allows physicians to electronically sign electronic Rx Orders for Prescriptions and DEA medications. The passwords are generated on a Hybrid PKI/OTP Token (Fob) that supports both password display and USB connection.

A one-time password (OTP) is a password that is valid for only one login session or transaction, on a computer system or other digital device. OTPs avoid a number of shortcomings that are associated with traditional (static) password-based authentication; the one time password is guaranteed to meet the 2-FA requirements as it meets both:

  1. Factor 1: Something a person has (such as a small keyring fob device with the OTP calculator built into it, or a smartcard or specific cellphone) and
  2. Factor 2: Something the user knows (such as a PIN).

Physicians can enroll for the service at: //www.identrust.com/igc/adl/index.html

 
 
 
 

Alert: eMail Attacks

Please read the following link on how to reduce spam: //www.cheatography.com/davidpol/cheat-sheets/outlook-how-to-reduce-spam-email/.   Use the cheatsheet as a guide to reduce the amount of Junk and Spam emails.

Some of the emails have become very dangerous should the user attempt to open any of the links or attachments inside the email. Several clients have been attacked by Ramsonware and have had to pay the criminals to unlock their data. Reducing the amount of spam will save time and reduce the amount of risk to users.

 
 
 
 
 
 

ADL Adds SSL Encryption to Website

To Improve Website Security ADL Adds SSL Encryption

ADL has added SSL Certificates to our website to enhance the security of the website and the download material.

Why SSL Certificate? SSL is the standard used to secure the Internet and it protects sensitive information as it travels across the world. It keeps the Internet from being ruled by anarchists and criminals and provides many direct benefits to our clients.

Benefits of SSL: Encrypt Sensitive Information

The primary reason SSL certificates are used, is to keep sensitive information sent across the Internet encrypted so that only the computer of the intended recipient can understand the messages/data. This is important because the information sent via the Internet is passed from computer to computer to get to the destination server. Any computer in between you and the sending server can see your credit card numbers, usernames and passwords, and other sensitive information, if it is not encrypted with an SSL certificate.

When an SSL certificate is used, the information becomes unreadable to everyone except for the server sending the information and the recipient that requested the information. This protects the data from hackers and identity thieves.

ADL Upgrades to Windows 10

ADL has upgraded all of our development and office PCs to Windows 10. This is to provide better HIPAA security and to support major ADL software releases and advanced features/functionality. We will continue supporting the older version of Windows, however, we are recommending that all the clients upgrade to Windows 10.

This version of Windows will provide for greater security and authentication features. Catana voice, a feature of Windows 10, will enable the users to control and run applications using their voice. The new operating system provides seamless connections between the PC, Portable devices, and Smart Phones.

The Windows 10 upgrades are free until July 2016 for all licensed users of Windows. And what will Windows 10 cost you if the miss the free upgrade window or you’re running XP or Vista? On Monday, Microsoft revealed the various prices. Windows Home will retail for $119. Windows 10 Pro will sell for price of $199. And the Windows 10 Pro Pack, which lets you upgrade from Windows 10 Home to Windows 10 Pro, will cost you $99.