Summary of videocall applications

Designed and created by Universidad de Burgos and Hospital Universitario de Burgos. Please cite this work (review process in progress).

Acronyms and Abbreviations

• ADFS: Active Directory Federation Services (AD FS). It is a software developed by Microsoft. Provide users with unique credentials to access all applications within the same organization.
• AES: Advanced Encryption Standard is a specification for the encryption of electronic data. Was established by the U.S. National Institute of Standards and Technology (NIST) in 2001. AES can use three different key lengths: 128, 192, and 256.
• APP: Advance Protection Program. It is a system developed by Google, capable of protecting users from all kinds of intentional online attacks. New protections are added automatically to deal with emerging threats.
• BAA: Business associate agreement. BAAs are hybrid contractual and regulatory instruments, meaning they both satisfy HIPAA regulatory requirements and create liability between the parties.
• CCPA: California Consumer Privacy Act (CCPA). The CCPA, aproved in 2018, gives consumers more control over the personal information that businesses collect about them. The CCPA regulations also provide guidance on how to implement the law.
• CSF: Common Security Framework. It is a set of documented policies and controls that govern the implementation and ongoing management of an organization's security.
• COPPA: Children's Online Privacy Protection Rule. It is a privacy act that imposes certain requirements on operators of websites or online services that collect personal information from children under 13 years of age.
• DTLS: Datagram Transport Layer Security. It is a protocol that provides privacy in communications. This protocol secures the client/server applications to avoid unwanted eavesdropping, unauthorized access, or message modification.
• E2EE: End-to-end encryption. It is a communication system where only the end users can read the messages. No third party can decrypt the data that is being communicated or stored.
• ECDHE-RSA: The acronym RSA comes from the surnames of Ron Rivest, Adi Shamir and Leonard Adleman, who publicly described the algorithm in 1977. RSA is a is a public-key cryptosystem that is widely used for secure data transmission. ECDHE (Elliptic Curve Diffie-Hellman) is an anonymous key establishment protocol.
• EEA: European Economic Area.
• Face-ID: A facial recognition system that allows biometric authentication, it was designed and developed by Apple.
• GDPR: General Data Protection Regulation. The European regulation on the protection of personal data. Effective since May 24, 2016.
• H.235: It is the protocol used to authenticate trusted H.323 endpoints and encrypt the media stream during meetings. H.323 is a recommendation from the ITU Telecommunication Standardization Sector.
• HIPAA: Health Insurance Portability and Accountability Act of 1996. An USA Act created primarily to modernize the flow of healthcare information. Includes how personal information should be maintained by the healthcare and healthcare insurance industries to avoid frauds and thefts.
• HITECH: Health Information Technology for Economic and Clinical Health Act. Enacted in 2009, it promotes and expands the adoption of health information technology.
• HITRUST: Prescriptive set of controls that meet the requirements of multiple regulations and standards, for example HIPAA.
• HaaS: Hardware as a Service. It is a cloud computing model in which it is possible to pay for the use of hardware resources without worrying about buying hardware or keeping the products updated.
• IETF: Internet Engineering Task Force. It is an organization that promotes the development of open standards, particularly for communications through the Internet.
• ISO: International Organization for Standardization. Develop and publish International Standards.
• PHIPA: Personal Health Information Protection Act. A legislation established in November 2004. Is one of two components of the Health Information Protection Act (HIPAA).
• PIN: Personal Identification Number. Also called PIN code is a numeric/alpha-numeric passcode used in the process of authenticating a user accessing a system.
• PIPEDA: Personal Information Protection and Electronic Documents Act. It is a Canadian law, approved in 2000 to promote consumer trust in electronic commerce and to protect the personal information.
• SAML: Security Assertion Markup Language. SAML es an open standard, based on the XML-based markup language, it is used for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider.
• SaaS: Software as a Service. It is a cloud computing model in which it is possible to pay for the use of a certain software without worrying about buying or operating that software.
• SIP: Session Initiation Protocol. It is a protocol used for initiating, maintaining, and terminating real-time sessions that includes voice, video and messaging applications. It is used for private voice and video calls.
• SHA: Secure Hash Algorithms. They are a family of cryptographic hash functions published by the National Institute of Standards and Technology (NIST). SHA are used as a checksum to verify data integrity.
• SCEP: Simple Certificate Enrollment Protocol. Is protocol created by IETF, it is designed to make the request and issuing of digital certificates as simple as possible.
• SOC2: System and Organization Controls, there are defined three levels SOC1, SOC2, and SOC3. It is an audit that measures the effectiveness of a cloud system based on the Principles and Criteria of the American Institute of Certified Public Accountants (AICPA).
• SSO: Single Sign-On. It is an authentication scheme that allows a user to log in with a single ID and password to any of several related, yet independent, software systems.
• SRTP-RTP: Secure Real-time Transport Protocol. An extension of the Real-Time Transport Protocol that adds security features, such as message authentication, confidentiality, and response protection, mostly intended for VoIP communications.
• TLS-SSL: Transport Layer Security, and its now-deprecated predecessor, Secure Sockets Layer. They are protocols for web browsers and servers that allow the authentication, encryption and decryption of data sent over the Internet.
• MFA/2FA: Multi-factor authentication (MFA) or two-factor-authentication (2FA). It is a method that reinforces the security of the applications, granting access to the system only after a user presents two or more different proofs of their identity.