Swedish Healthcare Uses YubiKey for Securing Access to Patient Data

PALO ALTO, Calif. and STOCKHOLM, Apr. 05, 2011 — To meet the security requirements from the Swedish Data Inspection Agency, Swedish hospitals are now starting to use YubiKey USB authentication, including a world leading quality register of stroke patients.

Riks-Stroke, the national register center for acute stroke, is one of the largest quality registers in Sweden. All Swedish hospitals admitting acute stroke patients participate. With more than a quarter of a million stroke events recorded, Riks-Stroke plays a leading role in European collaboration of stroke registers.

In October 2010, the Swedish Data Inspection Agency audited the quality of national registers. Riks-Stroke was criticized for its login security routines, a critique that also affected other audited registers. The Data Inspection Agency did not consider username and password to be sufficient means of authentication and required an additional level of security for login.

Today, employees securely log on to the Riks-Stroke registration pages with a YubiKey or smart card, meeting the Data Inspection Agency’s requirements.

We believe that the system will work well,” says Per Ivarsson, Riks-Stroke secretary.

The YubiKey simplifies the process of logging in with a One-Time Password (OTP) token as it does not require the user to re-type OTPs from a display device into the login field of the computer. The YubiKey is inserted in the USB port of any computer and the OTP is generated and automatically entered with a simple touch of a button on the YubiKey, without the need of any client software or drivers. The rugged, ultra-thin, battery-free, crush safe and waterproof design has also been fundamental to the success of the YubiKey, currently used by a million users globally.

For more about Riks-Stroke, please click here.

 

About Yubico

Yubico sets new global standards for simple and secure access to computers, mobile devices, servers, and internet accounts.

The company’s core invention, the YubiKey, delivers strong hardware protection, with a simple touch, across any number of IT systems and online services. The YubiHSM, Yubico’s ultra-portable hardware security module, protects sensitive data stored in servers.

Yubico is a leading contributor to the FIDO2WebAuthn, and FIDO Universal 2nd Factor open authentication standards, and the company’s technology is deployed and loved by 9 of the top 10 internet brands and by millions of users in 160 countries.

Founded in 2007, Yubico is privately held, with offices in Sweden, UK, Germany, USA, Australia, and Singapore. For more information: www.yubico.com

Press RoomPress Room

Share this article:


  • Introducing new features for Yubico Authenticator for iOSWe’re excited to share the new features now available for Yubico Authenticator for iOS in the latest app update on the App Store. Many of these improvements aim to address frequently requested features from our customers, while providing additional new functionalities for a seamless authentication experience on iOS.  With increased interest in going passwordless and […]Read moreiOSYubico Authenticator
  • Platform independent digital identity for all Many are understandably concerned that the great invention called the Internet, initially created by researchers for sharing information, has become a major threat to democracy, security and trust. The majority of these challenges are caused by stolen, misused or fake identities. To mitigate these risks, some claim that we have to choose between security, usability […]Read moreDigital IdentityEUDIFounderStina Ehrensvard
  • Q&A with Yubico’s CEO: Our move to the main Nasdaq market in StockholmAs 2024 draws to a close, it’s the perfect time to reflect on the incredible journey we’ve had this year and how it has shaped where we stand today as a company. To mark this moment, I sat down with our CEO, Mattias Danielsson, to look back on the milestones and achievements of 2024—culminating in […]Read moreCEOMattias Danielsson
  • Exploring DORA: A look at the next major EU mandateFinancial institutions have historically managed operational risk using capital allocation, but under EU Regulation 2022/2554 – also known as the Digital Operational Resilience Act (DORA) – the financial sector and associated entities in the European Economic Area (EEA) must also soon follow new rules. These new rules focus on the protection, detection, containment, and the […]Read moreDORAEU