Start Your Search
OS28 - Learning to Leverage Technology (ID 33)
- Event: e-Health 2017 Virtual Meeting
- Type: Oral Session
- Track: Clinical and Executive
- Presentations: 1
- Coordinates: 6/07/2017, 10:30 AM - 12:00 PM, Room 203AB
OS28.03 - Partnership with the BC Services Card to Authenticate eHealth Users (ID 331)
Purpose/Objectives: To share the successful outcome and implementation experience of BCs first deployment of the Provincial eHealth Viewer (CareConnect) to non-Health Authority users. A key aspect of the project was integrating with the new BC Service Card as the authentication mechanism to identify Canadian Blood Services staff.
Methodology/Approach: CareConnect is actively used by all six of BCs Health Authorities (HA). User requests identified a significant interest in providing access to CareConnect to non-Health Authority users. As such, the Provincial Health Services Authority (PHSA) project team created a non-HA Access Model Framework, initially focused on organizations with establish IT infrastructures, privacy and user support departments. The Framework included approaches to address: Technical Deployment Agreements User Access Privacy Security Operational Engagement and Governance process A key issue was how to identify individuals that the Health Authorities have no direct relationship with. The solution was to integrate with the BC Services Card. The BC Services Card replaces BCs Health Card. It includes a contactless encrypted chip that is linked to identity services and supports online authentication with passcode functionality. In effect, two factor authentication. PHSA and the Ministry of Technology and Citizen Services (MTICS) completed a technical proof of concept which confirmed the technology principles. With governance approval, the project team implemented the solution which included: Integration between the HA's Active Directory Federation Services (ADFS) and the BC Service Card infrastructure Creation of a CareConnect logon process for non-HA users, which seamlessly directs the users to the BC Service Card logon service. BC Service Card confirms the correct card and passcode combination, and informs the HA ADFS of a successful authentication, which in turn grants access to CareConnect. Once authentication is complete, users are matched with the role they registered with in CareConnect, and provided with the appropriate access
Finding/Results: The partnership with the BC Service Card leverages the key strengths of both organizations: BC Services Cards role is to identify specific individuals and authenticate their online presence to a very high security standard CareConnect enforces a role-based user access model to provide the appropriate content to authenticated user With this implementation, PHSA now has an established process to provide access to Provincial eHealth data to non-HA users who work in established organizations. Canadian Blood Services' staff benefit by having faster access to the information they require to support their clinical activities. While the user experience is very streamlined, there are concerns about employees having to use their personal BC Services Card in a work environment and the initial manual process to obtain passcodes. There were two significant Lessons Learned from the project: The technical infrastructure and network connectivity was extremely complex Multiple legal, privacy and security agreements were required amongst the numerous organizations involved
Conclusion/Implication/Recommendations: In designing provincial solutions, it is important to look outside the Health sector and create partnerships across Ministries in order to create an ideal solution. While it does add complexity, the first implementation sets the foundation for future growth.
140 Character Summary: Sharing the successful integration of the new BC Services Card with the Provincial eHealth Viewer in support of providing access to Canadian Blood Services' staff.
Only Active Members that have purchased this event or have registered via an access code will be able to view this content. To view this presentation, please login or select "Add to Cart" and proceed to checkout.