Scope of the Network - HI605-Group

advertisement
1. OVERVIEW
Scope of the Project
RapidCare will house 250 physicians that practice over 25 specialties. The clinic will
specifically house departments such as a central lab, a pharmacy, billing and
administrative offices, a surgical center, a radiology department, and various specialty
clinics. The clinic will be in the heart of the State of Alabama’s largest city,
Birmingham. Birmingham has over 1 million people living in its metro area, with roughly
242,000 people living within its city limits. Due to the facilities size, a large span of
specialty practices and location the facility can expect to serve a large number of patients
per year. In addition, due to cost inefficiencies throughout the health care system, many
health care organizations have shifted the reliance on traditional hospitals for the delivery
of care to either affiliated or non-affiliated outpatient or ambulatory care centers, such as
RapidCare. Not only will the reliance on health care information technologies and robust
networks be vital to connect an affiliated or non-affiliated network of care providers be
critical, the linkage of these networks within a health care organization and beyond will
likely be key. As a result, patient data is growing more voluminous as each year passes
and issues of fiscal and clinical efficiencies and patient safety are only growing in
concern. Also, as the traditional delivery method of health care is shifting to a more
fragmented and disparate model, the management of patient and clinical information will
more than likely be critical going forward. As a result of these fiscal and clinical
inefficiencies, health care costs have reached an apex. In response, the health care
industry is heavily relying on HIT to implement electronic medical records, computerized
physician order entry systems, clinical decision support systems and other technologies to
help practitioners and care providers achieve greater efficiencies by more effectively
managing and responding to critical patient data. A great example of the reliance of these
systems is through the passage of the HITECH Act through ARRA legislation. As a
result, the federal government predicts these systems will save the health care industry
billions of dollars each year by the effective management of data and will ultimately
improve patient safety. Due to the shift in focus in the health care industry on process
efficiency and patient safety, our team recognizes that RapidCare must employ the use of
EHR, CPOE, and CDSS systems. Therefore, this proposal hopes to achieve a
comprehensive solution to address the robust communication needs that RapidCare
expects and the industry demands.
Objective of the Network
The sheer development of a robust IT network only will not, in itself, be the only factor
to achieve the clinical and informational efficiencies that RapidCare demands. Therefore,
our team has outlined 6 specific goals that, if achieved, will make this implementation an
overall success. The following are the specific goals in detail:
1. Security: Of all the industries that place a premium on secure IT networks, the health
care industry likely ranks at the very top of the list. Health care organizations have a
voluminous amount of patient specific clinical data such as charts, diagnosis, and
medications. In addition to clinical data, these organizations also keep patient specific
administrative data such as names, addresses, social security numbers, and financial
information. Network security threats are evolving rapidly from the relatively
simplistic hackers to a very sophisticated network of organized IT criminals. Due to
the shift of housing this information from the traditional paper and filing systems to
electronic filing systems coupled with the alarming growth of sophistication of the
network hackers, keeping this highly sensitive information safe and secure is at a
premium. Just like the IT criminals, the nature of their network attacks varies in
nature. Some attacks have no motive other than to create malicious activity on the
network. These attacks often cause harmful problems not only in the business and
process efficiencies of the network, but more critically, can interfere with the delivery
of critical patient care. Other attacks are more specific in nature and are created to
steal the personal information of patients. These attacks are lucrative for the
criminals, but they are as equally devastating to the victims and the health
organization that was compromised. Government regulations such as the Health
Insurance Portability and Accountability Act (HIPAA) require that health
organizations keep sensitive patient information safe and secure. In order to protect
patients against these network threats and to protect itself against heavy government
penalties, our solution will address the security needs of RapidCare by developing
comprehensive and integrated safeguards throughout the network.
2. Integration: Due to the large number of different specialty areas housed throughout
the clinic, each area will require and rely upon many different disparate systems to
achieve the overall efficiencies and reliability they expect. Therefore, the RapidCare’s
network will be robust enough to allow compatibility and integration among these
systems.
3. Versatility: RapidCare will employ the use of many types of data files such as text,
graphics, audio, and video. Due to the needs and demands from each department, the
network will allow each department and its end-users to retrieve, process, share and
store all data such as a simple patient demographics file to as large and complex as a
3D radiological image.
4. Collaboration: RapidCare will not only have the need to share and transfer data and
information within the walls of the clinic, it must also have the ability to share data
beyond the walls of the clinic in order to achieve the comprehensive care that the
industry and patients alike demand. Therefore, the network will be robust enough to
allow the clinic to easily and efficiently share various types of data.
5. Scalability: The demand for highly effective and highly efficient patient care has
served as the catalyst for the rapid change of health care information technology over
the past several years. Therefore, the network will not only have to be robust and
comprehensive enough to meet their IT needs today, but must be scalable enough to
meet future demands without overhauling the entire network. The proposed network
will be solid enough to achieve these demands.
6. Training: The power and efficiency of the network will be for naught if RapidCare
does not understand the network, its capabilities, and threats. Our team will ensure
that this need is met by scheduling comprehensive training sessions with appropriate
staff who will be concerned with the day to day operations of the network.
Intended Users
The primary users of the network will be physicians, physician-assistants, nurse
practitioners, nurses, pharmacists, lab technicians, clinical technologists, departmental
administrators, departmental financial staff, and other personnel.
Assumptions
(group input??)
2. NETWORK ANALYSIS
Data Types: The data types at RapidCare will both be similar and varying among the
number of departments within the clinic. The following are the specific data types within
the network:
 Text: Patient demographics, patient charts, billing information, and various
reports
 Graphic: X ray images, CT images, MRI images, pictures, and various other
clinical images.
 Voice and Video: VOIP, teleconferencing, and various clinical video images.
Data Sources: Data will be created and used at all of the various workstations throughout
the RapidCare clinic. There are 231 data/voice jack locationsindicated on the plan
throughout the clinic. Each location will have two data drops and two voice drops of
CAT6 ethernet. Therefore, the network could support 924 wired devices. The types of
equipment will vary among each department. These equipment types might include:
o PCs, Printers, and Scanners
o IP Phones
o Lab equipment
o Radiological equipment such as X ray machines, CT scanners, and MRI
machines.
o Biomed Equip such as infusion pumps, medicine dispensers.
o Bedside equipment
o Surgical Equipment
o Software
Number of Users: RapidCare contains a central lab, radiology, surgical suites, other
medical offices, and a retail pharmacy. RapidCare houses more than 250 physicians in
the specialty areas of ENT, Internal Medicine, GI-Endoscopy, Cardiology, General
Surgery, Dermatology, Neurology, Hematology/oncology, OB/GYN, and Orthopedics. It
has been assumed that each area of the clinic has at least 7-10 support staff. Therefore, it
can assumed that there are at least 200 additional staff working at RapidCare resulting in
a total of around 450-500 end-users.
Transmission Speed Requirements: The network at RapidCare must be powerful, fast,
secure, and efficient enough to meet all of its current and future IT demands. To support
these demand, our team will deploy a Gigabit Ethernet capable infrastructure througout
the clinic.
Load Variation Estimates: Unlike traditional industries, health care peak business hours
can vary. However, our team as estimated that due to the fact that RapidCare is an
outpatient center, the clinics peak load will likely be during the hours of 7AM-7PM
Monday-Saturday. (Tom input needed)
Network Storage Requirements: The implemented network must have sufficient
storage, archival and retrieval capabilities to handle the enormous amount of data and
data types, as well as support the numerous complex data sources which were listed
previously in this document. In addition, there could be 450-500 end-users that stressing
the network infrastructure with demands of their own at a given time.
Reliability Requirements: Industry standards require that any given network achieve at
least 99.99% uptime annually. Therefore, assuming that RapidCare will be have network
needs 24 hrs per day, 6 days per week for 52 weeks per year results in roughly 7,500
network hours per year. Therefore, the maximum amount of unplanned downtime the
network will have is a total of 7.5 hours per year. Redundant systems will be used to
achieve this reliability level.
Security Requirements: As detailed previously as one of our primary network goals, the
following are the network security requirements for RapidCare:


Firewalls: A network firewall is a highly effective security tool that surrounds the
network and serves as a secure buffer between a private network and an outside
network such as the internet. Firewalls specifically will help RapidCare to ensure
that only authorized personnel access to its network and the sensitive information
its patients, block potentially dangerous transmissions from both internal and
external users, and provide internet and email filtering capabilities.
Intrusion Prevention Systems: IPS supports the network firewall and serves as an
added protection against outside attacks to the network. If an attack makes it
through the firewall, the IPS will detect this attack before any damage can be
done. Once the attack is detected, the IPS will alert administration, stop the
hackers, and can assist in reconfiguring the system to prevent future attacks.

Wireless Intrusion Prevention System: The wireless IPS is very similar to the
traditional network IPS, except that the wireless IPS is specifically designed to
monitor and prevent attacks on the wireless network and devices.
3. NETWORK DESIGN
(Bill’s diagrams and description inserted here.)
4. EQUIPMENT DETAILS
The following is a detailed least of equipment that has been identified to support
RapidCare’s network needs:






Category 6 Ethernet cable: is the standard cable to support 1 gigabyte Ethernet
speeds and is designed at frequencies up to 250 MHz. In addition, Cat 6 helps to
reduce cross-talk and electron magnetic interference.
Single-mode Fiber Cable: Fiber cable is ideal for supporting networks that
require high speeds, a large carrying capacity, over a long distance, and with
increased resistance to electromagnetic interference. Fiber will serve as the
horizontal backbone of the clinic and will be the closet-to-closet connection on
each floor.
RJ45 jacks: RJ45 is an industry standard, 8 conductor, modular jack that is
specifically designed to terminate UTP data cable and support various types of
Category 5 and 6 cable.Racks: APC NetShelter SX 48U racks, Feature-rich
enclosures optimized for easy installation, managing cables, integrating power
distribution, and maximizing airflow. Racks will include ceiling fan trays with
thermostats to aid in cooling.
Cisco 3800 ISR router: This router delivers the performance, availability, and
reliability required for all mission critical business applications in very demanding
environments. The features include built in security, service device manager,
modular platform with a broad range of interface options, up to two built in
10/100/1000 Mps built-in routed ports, up to 112 10/100 Mps switch ports with
optional power over the Ethernet, up to 2500 VPN tunnels, Call Manager Express,
Survivable Remote Site Telephony, Support for WLAN, Support for Small Form
Factor pluggable port gigabyte Ethernet, and built in redundant power supply.
Cisco ASA 5510 Firewall: An Adaptive Security Appliance that has a robust
suite of highly integrated security services. It also offers the most proven
firewall; a comprehensive, highly effective intrusion prevention system (IPS) with
Cisco Global Correlation and guaranteed coverage; high-performance VPN and
always-on remote access, the Cisco ASA 5500 Series helps organizations provide







secure, high performance connectivity and protects critical assets for maximum
productivity
Cisco 1200 wireless access point: The Cisco Aironet 1200 Series Access Point is
a single band lightweight or autonomous access point with dual diversity antenna
connectors for challenging RF environments. It offers the same versatility, high
capacity, security, and enterprise-class features demanded by industrial wireless
LAN customers in a single-band 802.11g solution.
Cisco Wireless Control System: Software program that allows the user to plan,
deploy, monitor, troubleshoot, and report on WLAN. The program improves
efficiency through easy to use GUI and scales to support a WLAN of any size.
Cisco Security Agent v5.2: Cisco Security Agent security software provides
threat protection for server, desktop, and Point-of-Service (POS) computing
systems. Cisco Security Agent goes beyond conventional endpoint security
solutions by identifying and preventing malicious behavior before it can occur,
thereby removing potential known and unknown security risks that threaten
enterprise networks and applications. Cisco Security Agent mitigates new and
evolving threats without requiring reconfigurations or updates on endpoints,
providing robust protection with reduced operational costs
IronPort C160 email security: The Cisco IronPort Email Security Appliance
X1070 delivers high-performance protection for the most demanding networks in
the world: the ISPs and large enterprises that are the primary targets of spam and
viruses. The X1070 provides high email security on a platform that can meet
today's demands for innovation and tomorrow's demands for scalability. IronPort
preventive filters and signature-based reactive filters, combined with content
filtering and Cisco partner technology, provide high levels of email security with
innovative visibility and management tools.
Cisco Catalyst 3750 Switches (stacking): The Cisco Catalyst 3750 v2 Series are
next-generation energy-efficient Layer 3 Fast Ethernet stackable switches. These
new switches support Cisco Energy Wise technology, which helps you manage
the power consumption of your network, thereby reducing energy costs and
carbon footprint. The Cisco Catalyst 3750 v2 Series consumes less power than its
predecessors and is an ideal access layer for enterprise, retail, and branch
environments. It helps increase productivity and protects your network investment
by providing a unified network for data, voice, and video.
Cisco Unified Communications Series 500: Communicate effectively by
reaching the right resource the first time. Now your small business can deploy an
affordable, easy-to-manage communications system with Cisco Unified
Communications 500 Series for Small Business. The series supports from 8 to
104 users in flexible deployment models based on your needs, a wide array of IP
phone models, public switched telephone network (PSTN) interfaces, and internet
connectivity with security services. The series eliminates the need for multiple
servers and combines voice, data, video, security, and wireless capabilities. It
integrates with existing desktop applications such as calendar, email, and
customer relationship management (CRM) programs.
Cisco 4400 WLAN controller: Cisco Wireless LAN Controllers are responsible
for system wide wireless LAN functions, such as security policies, intrusion



prevention, RF management, quality of service (QoS), and mobility. They work in
conjunction with Cisco Access Points and the Cisco Wireless Control System
(WCS) to support business-critical wireless applications. From voice and data
services to location tracking, Cisco Wireless LAN Controllers provide the control,
scalability, security, and reliability that network managers need to build secure,
enterprise-scale wireless networks-from branch offices to main campuses. Cisco
Wireless LAN Controllers smoothly integrate into existing enterprise networks.
They communicate with Controller-based Access Points over any Layer 2
(Ethernet) or Layer 3 (IP) infrastructure using the Lightweight Access Point
Protocol (LWAPP). These devices support automation of numerous WLAN
configuration and management functions across all enterprise locations.
APC Symmetra Battery Backups: The APC Symmetra PX is a world class,
redundant, scalable, power protection system designed to cost effectively provide
high levels of availability. Seamlessly integrating into today's state-of-the-art data
center designs, the Symmetra PX is a true modular system. Made up of dedicated
and redundant modules--power, intelligence, battery and bypass, all engineered
into a design that is easily and efficiently serviceable, this architecture can scale
power and runtime as demand grows or as higher levels of availability are
required. Symmetra PX serves as the core power train that drives APC
InfraStruXure® systems for small and medium data centers but can also power
individual "zones" of larger data centers. Highly manageable, the Symmetra PX
features self-diagnostic capabilities and standardized modules which mitigate the
risk of human error resulting in increased overall data center reliability.
Cooling Systems: (need Bill input)
List I put on Wiki
o Cost, Description, Warranty, Licenses, etc
o (Bill’s input needed, # of, etc)
5. COST ANALYSIS
Product
Category 6 Ethernet cable (price per ft)
Single-mode Fiber Cable
RJ45 jacks
Racks, shelves, etc
Battery Backups
Cooling Systems
Cisco 3800 ISR router
Cisco ASA 5510 Firewall
Cisco 1200 wireless access point
Cisco Wireless Control System
Cisco Security Agent v5.2
IronPort C160 email security
Cisco Catalyst 3750 Switches (stacking)
Cisco Unified Communications Series 500
Cisco 4400 WLAN controller
TOTAL

Ben makes spread sheet
o Product
o Price
o Quantity
o Total
6. BENEFIT ANALYSIS (optional)
Price
Quantity
Total
0.17
394
57000
1
$1,050.99
8
$8,978.77
$2,667.81
$39.99
$0.00
$304,500.00
$8,904.99
$18,229.78
$2,661.68
$9,205.61
$465,069.39
$9,690.00
$394.00
$0.00
$8,407.92
1
$8,978.77
1
$2,667.81
7
$279.93
0
$0.00
1 $304,500.00
1
$8,904.99
6 $109,378.68
1
$2,661.68
1
$9,205.61
Download