OsteoSys SONOST 3000 - Certification and Password Management; SEC.6 Password Management

User’s Manual (Confidential)
OsteoSys Co., Ltd.
Model Designation : SONOST 3000 DOC. No. : OT06-2R7124
100
NOTE !
Audit Log will be added every data handling action.
SEC.5. Certification
Authentication is the process of providing an individual's identity and is a key component
of an access control system.
A password inspector account is required to restrict access to patient health information
to authorized personnel.
SEC.6. Password management
There is a risk of losing or hacking passwords. To create and use secure passwords, you
can apply various rules to password generation. The following checklist is determined by
the user.
Password
Recommended use
pattern
Contents
minimum
length
4-16 characters
short passwords are easy to remember, but are easily
at risk. Long passwords are secure, but easy to forget
or write down. Long passwords increase resistance to
brute force attacks.
Expires
30 – 360 days
When the expiration date comes, the user must change
their password regularly. A common rule of expiration
period is to balance the length of the expiration
authority with the password so that it expires before the
password is cracked.
Character
composition
You must mix
uppercase and
lowercase letters,
This is a set of attributes used to increase the number
of possible password combinations, prevent dictionary
attacks, and mitigate brute force attacks. It also makes