Introducing Modern Web Security in a Geriatric Health Sector

This talk examines HelseID, a national trust service that uses OAuth 2.0 and OpenID Connect to protect Norwegian healthcare APIs. It covers healthcare-specific security challenges and examples of supporting both legacy systems and modern applications.

Syllabus

Introduction
About Rune
Norway
The Norwegian Health Sector
A bit of history
Helse
Norway Institute of Public Health
Apis
Web Browser
Web Applications
National Service
GDPR
Challenges
Availability
Growth
Automating
Summary
Questions
Relation between HeID and Nordic Health Network
Who is supporting all the applications
Two questions
Who can offer healthcare systems
Approval processes
Cloud fallback
Financing
Norwegian National ID
Technical indepth
API versioning
Client requirements
Prebuilt libraries
Software development process