feature - epcs (electronic prescription of controlled substances) otp (one time password) ·...

Version No: 3.0

Feature - EPCS (Electronic Prescription of Controlled Substances) OTP (One Time Password)

Feature – EPCS OTP

4010 Moorpark Avenue, Suite 222, San Jose, CA 95117. Phone (Sales): 8776936748 Phone (Support): 408873 3032

2

TABLE OF CONTENTS

1. INTRODUCTION (USER STORY)............................................................................. 3

2. OTP ETOKEN .................................................................................................. 3

3. PURCHASE AND REGISTER ETOKEN ....................................................................... 4

4. OTP REQUIRED TO SIGN THE UNSIGNED PRESCRIPTION/REFILL OF DEA CLASS DRUGS .. 15

AUDIENCE

PrognoCIS Users



3

1. INTRODUCTION (USER STORY)

Earlier, eTokens from Iden Trust was the only option used by Users for signing digital certificate for the controlled substance drugs to be sent electronically. The eToken or dongle provided by Iden Trust had to be kept connected to the computer on a continuous basis. The limitations that were observed with the eTokens were that they were Windows OS dependent and IE (Internet Explorer) browser dependent – which was a hindrance to Users who didn’t use Windows OS or IE browser. Soon, Iden Trust came up with a resolution to the limitations in the form of EPCS OTP (One Time Password). With the newer OTP eToken the requirement for the dongle (eToken) to stay connected to the User’s PC continuously diminished. Also, the dependency on a particular browser was no longer true. OTP token generates six digit number One Time Password, which can be used for EPCS.

2. OTP ETOKEN

OTP eToken is a new dongle performing similar functions as that of the earlier EPCS USB eToken with an additional functionality of generating random and fresh One Time Password instantly. Refer to the figure 2-1 Figure 2-1: OTP eToken



4

3. PURCHASE AND REGISTER ETOKEN

To register the eToken do visit the following IdenTrust website and follow the directions to apply, to get verified, and to get your certificate: https://www.identrust.com/prognocis/index.html

Following are most of the screens that a User would encounter while purchasing and registering the eToken, maximum images have been provided:

Figure 3-1: The first page that is viewed on click on the website address

https://www.identrust.com/prognocis/index.html



5

Figure 3-2: The page displayed on click on the ‘Buy’ button

Figure 3-3: Selection of correct OTP Token option



6

Figure 3-4: Selection of correct OTP Token option

Figure 3-5: Enter your details



7

Figure 3-6: Enter your payment details



8

Figure 3-7:

Figure 3-8: It is required to confirm that your Token is inserted



9

Figure 3-9: Follow the instructions to proceed



10

Figure 3-10: Click ‘Yes’ to install certificate



11

Figure 3-11: Follow the step by step instruction for key pair generation



12

Figure 3-12: Verify Certificate details and set OTP password



13

Figure 3-13:



14

Figure 3-14: Certificate Retrieval process complete

Figure 3-15: Registration process Complete



15

Following three parameters are considered for validation:

i. OTP Email ID (acquired at the time of registration)

ii. OTP Password (acquired at the time of registration)

iii. OTP (generated instantly on the OTP token)

Tip: Maximum failed attempt to login is eight times, after eight unsuccessful attempts the Web service gets blocked. The User would then require contacting Iden Trust customer support

4. OTP REQUIRED TO SIGN THE UNSIGNED PRESCRIPTION/REFILL OF

DEA CLASS DRUGS

All DEA class drug has to be signed by EPCS enabled provider before sending it via eRx. A DEA class drug when prescribed/refilled on the Prescription/Refill eRx screen and if the type is unsigned then at the time of prescription, the Provider is expected to enter the valid password, as well as the freshly generated OTP from EPCS eToken.

4.1 On prescription screen

The added DEA class drug is unsigned. Refer to figure 4.1-1 Figure 4.1-1:

eRx Summary popup displaying requirement of two factors for authentication, a password and a freshly generated EPCS OTP. Refer to figure 4.1-2



16

Figure 4.1-2:

Message displaying eRx sent successfully Refer to figure 4.1-3

Figure 4.1-3:

4.2 On refill screen



17

On Refill Request screen, When a Provider is required to ‘accept’ a refill request. Refer to figure 4.2-1

Figure 4.2-1:

Refill Request screen displaying two-factor authentication requirement of a password and freshly generated EPCS OTP. Refer to figure 4.2-2

Figure 4.2-2:

Message displaying Refill Response sent successfully Refer to figure 4.2-3



18

Figure 4.2-3:

4.3 On audit trail Report screen

Figure 4.3-1:



19

Figure 4.3-2:

feature - epcs (electronic prescription of controlled substances) otp (one time password) ·...

Documents