Acuo Audit Manager, a central audit server repository, provides secure (TLS and HTTPS) and non-secure (UDP, TCP, and HTTP) transmission and auditing options for different healthcare application systems.
Acuo Audit Manager is an application that receives and collects audit records from multiple systems and helps to meet the requirements for patient information privacy as prescribed by the Health Insurance Portability and Accountability Act (HIPAA) regulation. Exchanges and access to this information that is outside the scope of regular treatment, planning, or healthcare operations should be registered in an audit trail that can be regularly inspected. Integrating the Healthcare Enterprise (IHE) specifies the exchange protocol between individual devices that collect the audit trail information using a central audit repository to replace multiple audit trails for each individual system.
The IHE initiative defines a set of profiles, actors, and transactions that create common scenarios for particular workflow processes. The Integration Profiles depict security as a fundamental requirement of the framework. Specifically, the Audit Trail and Node Authentication (ATNA) profile defines standards-based mechanisms for securely transmitting and storing audit records in a central repository. The data structure defined by the profile provides a number of record types that capture different audit events.
Acuo Audit Manager, which conforms to the IHE standards, can receive messages in both RFC-3881 and the new DICOM schema via syslog protocol and also exposes RESTful APIs to support incoming FHIR Audit resource or bundle. It provides a secure web application for efficient searching, viewing, and deletion of ATNA messages, apart from other administrative options. The application provides support for “Filter and Forward” options and also allows viewing of audit messages through the new RESTful ATNA protocols via ITI-81 and ITI-82 transactions.