1 National E-Health Transition Authoritywww.nehta.gov.au

Healthcare Identifier Service

27 March 2012

Peter Padd

2 National E-Health Transition Authoritywww.nehta.gov.au

•Helps to uniquely identify individuals and organisations involved inhealthcare across Australia

•Uses a unique 16 digit number

•4 types of identifiers• IHI - Individual Healthcare Identifier• HPI-I - Healthcare Provider Identifier - Individual• HPI-O - Healthcare Provider Identifier – Organisation• Contracted Service Provider (example: SAAS, PAAS, IAAS)

Healthcare Identifier Service

3 National E-Health Transition Authoritywww.nehta.gov.au

Individual Healthcare Identifier(IHI)

•Allocated to all individuals enrolled in• the Medicare program• Department of Veterans’ Affairs (DVA)• others who seek healthcare in Australia

•Allows healthcare organisation the use of the Medicare card & number,DVA treatment card &number or an IHI card with demographics to obtainthe IHI from the HI Service•Also can use demographic searching if you don’t have one of the abovecards & numbers

4 National E-Health Transition Authoritywww.nehta.gov.au

IHI Functions

Service B2B HPOS MSO Use

Create Verified IHI � This service allows for a verified IHI to be created for a healthcareindividual.

Create Unverified IHI � � This service allows for an IHI record to be created for a healthcareindividual whose identity has not been verified by Medicare Australia

Create Provisional IHI � This service allows for an IHI record to be created when ahealthcare individual is unable to be identified

Update IHI Record � � This service allows for details of an IHI record to be updated

IHI Single Search � � This service allows for IHI records to be searched individually

IHI Batch Search � This service allows for IHI records to be searched in a batch

Resolve Provisional IHI Record –Create Unverified IHI � � This service allows for the resolution of a provisional IHI record

through the creation of an unverified IHI

Resolve Provisional IHI Record –Merge Records � � This service allows for the resolution of a provisional IHI record

through merging IHI records

Notify Duplicate IHI � � This service allows for the HI Service to be notified of potentialduplicate IHI records

Notify Replica IHI � � This service allows for the HI Service to be notified of potentialreplica IHI records

5 National E-Health Transition Authoritywww.nehta.gov.au

Healthcare Provider IndividualHPI-I

•To be eligible to apply for an HPI-I, a healthcare provider must:•be registered by a registration authority as a member of a healthprofession

OR•be a member of a professional association that

• relates to the healthcare that has been provided by the member• has uniform national membership requirements

6 National E-Health Transition Authoritywww.nehta.gov.au

Provider RegistrationHow to ....

•Providers registered with Australian Health Practitioner RegulationAgency (AHPRA) automatically are allocated and HPI-I. These groupsinclude:

• Chiropractic, Dental, Medical, Nursing and Midwifery, Optometry,Osteopathy, Pharmacy, Physiotherapy, Podiatry & Psychology

•From 1 July 2012, the following professions must be registered withtheir National Board to practise anywhere in Australia:

• Aboriginal and Torres Strait Islander health practitioner• Chinese medicine practitioner• Medical radiation practitioner and• Occupational therapist.

•A Healthcare Provider may register with the HI Service where they arenot registered in a profession covered by AHPRA.

7 National E-Health Transition Authoritywww.nehta.gov.au

HPI-I Functions

Service B2B HPOS MSO Use

Healthcare Provider Directory –Manage Provider Directory Entry � � � This service allows for a trusted party to manage entries for healthcare

providers and organisations within the HPD

Healthcare Provider Directory –Search for Individual ProviderDirectory Entry

� � � This service allows for a trusted party to search for entries within theHPD

Read Provider or AdministrativeIndividual Details � � � This service allows for a trusted party to read the details of a RO,

OMO or healthcare provider record within the HI Service

Manage Provider or AdministrativeIndividual Details � � � This service allows for a trusted party to create and amend the details

of a RO, OMO or healthcare provider record within the HI Service

Read Reference Data � This service allows for a trusted party to read the current referencedata values held within the HI Service

8 National E-Health Transition Authoritywww.nehta.gov.au

•A healthcare organisation can apply to the HI service for a HealthcareProvider Identifier – Organisation (HPI-O) number.

•A healthcare organisation is an entity, or a part of an entity that provideshealthcare (including healthcare provided free of charge).

•To be eligible to apply for an HPI-O, a healthcare organisation must:• be an entity as defined in the Healthcare Identifiers Act 2010• have an employee who is an identified healthcare provider and

provides healthcare as part of his or her duties• have one Responsible Officer• have at least one Organisation Maintenance Officer

Healthcare Provider OrganisationHPI-O, How to ...

9 National E-Health Transition Authoritywww.nehta.gov.au

HPI-O Functions

Service B2B HPOS MSO Use

Read Provider Organisation Details � � � This service allows for a trusted party to read the details of an existinghealthcare organisation within the HI Service

Manage Provider Organisation Details � � �This service allows for a trusted party to either create a new networkhealthcare organisation or amend the demographic and service detailsof an existing healthcare organisation within the HI Service

Manage Organisation MaintenanceOfficer Links � � � This service allows for the links between HPI-Os and OMOs to be

amended

Search Healthcare Provider Directory– Search for Healthcare OrganisationEntry

� � � This service allows for a trusted party to search for the details of ahealthcare organisation’s record within the HPD

Create HPI-O for Seed Organisation � This service allows for a RO to register a seed organisation with theHI Service

Manage HPI-O Links � � � This service allows for OMOs to modify the links between networkhealthcare organisations

Read Reference Data � This service allows for a trusted party to read the current referencedata values held within the HI Service

10 National E-Health Transition Authoritywww.nehta.gov.au

Contracted Service Provider(CSP)

•CSP entities are specifically defined in the Healthcare Identifiers Act asproviding:

• information technology services relating to the communication of healthinformation or

• health information management services

• A CSP can access the HI Service on behalf of healthcare organisationsusing a Medicare PKI digital certificate.

• A CSP can register with the HI Service but cannot interact with the HIService until a healthcare organisation has authorised it to do so.

11 National E-Health Transition Authoritywww.nehta.gov.au

For Developers

12 National E-Health Transition Authoritywww.nehta.gov.au

National Authentication Service forHealth (NASH)

27 March 2012

Peter Padd

13 National E-Health Transition Authoritywww.nehta.gov.au

•Establish a national framework for the issue andmanagement of trusted digital credentials to allentities in the healthcare sector;

•Enabling the traceability of e-health transactionswith trusted identities;

•Delivering appropriate levels of authenticationfor healthcare providers, both individuals andorganisations;

NASH Objectives

14 National E-Health Transition Authoritywww.nehta.gov.au

Providing the foundation for NEHTA initiatives:• the HI Service,

• Secure Messaging

Enabling the delivery of major new e-health services:• electronic referrals,

• diagnostic services,

• discharge summaries,

• medications management and

• the personally controlled electronic health records

NASH Objectives

15 National E-Health Transition Authoritywww.nehta.gov.au

NASH – Key Design Principles

• Must have HPI-I/-O numbers inside certificates

• Must be able to use tokens as a flexible container

• Service must have improved usability

• Must have Allow healthcare communities to issue andmanage authentication credentials locally. i.e. localissuance capability

• Must have good software vendor support

16 National E-Health Transition Authoritywww.nehta.gov.au

The NASH Blueprint

HealthIdentifierService

Othercommunities

TDS

TDS

NASH Governance

Business policy, practices, guidance and contract management

e-health

HPOS

SecureMessaging

PhysicalAccess

LogicalAccess

NASH Service

Enrolment

ManagementCredential issuance & Management

CredentialUsage

TokenManagement

Services

Report & AuditServices

CredentialManagement

Services

FulfillmentServices

Service Desk

Credential Management Workflow Engine

CentralProduction

CredentialRequests

ServicesCatalogue Validate Deliver Help

Requests

LocalIssuance

Reporting& Billing

IdentityManagement

Services

DirectoryInterface

Local TokenManagement

Systems

17 National E-Health Transition Authoritywww.nehta.gov.au

NASH in 2012• NEHTA has established e-Health Authentication Services

PTY LTD a wholly owned subsidiary of NEHTA

• IBM Australia has been awarded by NEHTA to design,build and operate the NASH

• NASH will be operational for subscribers from June 2012

• HPI-O, HPI-I and administrative roles in support of thePCEHR, secure messaging and the HI Service

• Developer service desk and materials available this weekto enable authentication required of PCEHR, securemessaging

18 National E-Health Transition Authoritywww.nehta.gov.au

Services by Channel

19 National E-Health Transition Authoritywww.nehta.gov.au

HPI-O, HPI-I, CSP, admin rolesHow to• Existing providers, CSP, administrative roles will

automatically be provided NASH credentials and tokens

• Post June 2012 - new enrolments via the HI Service willautomatically create fulfilment requests to the NASH inan on going basis

• So all you need to do to get started, contact DHSMedicare to enrol your organisation in the HI Service

20 National E-Health Transition Authoritywww.nehta.gov.au

For Developers• NEHTA have produced developer materials and test certificates to enable

development of secure messaging and PCEHR B2B integration• Developer Pack comprises:

o NASH HPI-O Generic Test Certificateso Draft NASH Certificate Profiles, providing necessary technical details of the

Certificate design.o NASH Smartcard Reader Informationo NASH Interim Middlewareo Draft Token Specificationso NASH Concept of Operationso Developer Materials Terms and Conditions

• The Developer Material and support will be available later this week via theNCAP portal or by calling the NASH Service Operator on

o 1-300-307-086 oro Servicedesk@Nehta.gov.au

21 National E-Health Transition Authoritywww.nehta.gov.au

PCEHR B2B Gateway

27 March 2012

Werner Van Huffel

22 National E-Health Transition Authoritywww.nehta.gov.au

Interactions with the B2B gateway

CIS*

Provider Portal

Consumer Portal

Repository

B2B gateway

Record Access Service

View ServiceDocument Exchange Service

Registration

Account Management

Core B2B services:1. Does PCEHR Exist2. Gain Access to PCEHR3. Get Index View4. Get Specific Document5. Submit Document to PCEHR6. Register Document with PCEHR7. Remove Document from PCEHR

23 National E-Health Transition Authoritywww.nehta.gov.au

•Does PCEHR exist– Provides the ability to for PCEHR-accessing organisations (HPI-O)

systems to verify the existence of a given IHI registered individual.• Check that the record exists for a provided IHI• Notify the requestor if a an access code is required to gain access to the PCEHR

•Gain Access to PCEHR– Provides the ability for PCEHR-accessing organisations (HPI-O) to be

placed on the Provider Access List of the given PCEHR IHI• Gain access for provided IHI with the asserted HPI-O, the Accessing Mode (e.g.

emergency, with or without Access Code)• Notify of success or failure

Record Access Services

24 National E-Health Transition Authoritywww.nehta.gov.au

•Get Index View– Retrieves a list of documents related to a given IHI and authorised to be

accessible by the asserted HPI-O• Retrieve document list (index view result) for provided IHI with the asserted HPI-O• Provide requestor with list of document IDs they are entitled to view given their access

request level

View Services

25 National E-Health Transition Authoritywww.nehta.gov.au

•Get Specific Document– Retrieves an identified document related to a given IHI and authorised to

be accessible by the asserted HPI-O• Retrieve document for provided IHI with the provided document ID• Provides the requestor with a CDA document

•Submit Document to PCEHR– Post a CDA document package with XDS-metadata to the PCEHR

• Given an IHI and a HPI-O a signed CDA document package is posted to the PCEHR• A success or failure message is returned to the requestor

Document Exchange Services

26 National E-Health Transition Authoritywww.nehta.gov.au

•Register Document with PCEHR– Record a previously validated CDA document package, stored within a

conformant repository with the PCEHR• Given an IHI and a HPI-O a signed CDA document package and an XDS metadata

description of the document.• A success or failure message is returned to the requestor

•Remove Document from PCEHR– Logically remove an identified document related to a given IHI and

authorised to be removed by the asserted HPI-O• Remove document for provided IHI under the asserted HPI-O with the provided Doc ID• A success or failure message is returned to the requestor

Document Exchange Services

27 National E-Health Transition Authoritywww.nehta.gov.au

1 National E-Health Transition Authoritywww.nehta.gov.au

PCEHR and CCA

[PCEHR objective] Risk

Health Identifiers

Clinical Documents

Find a PCEHRNASH

Privacy and Security Management

CCA

User interface

Industry Development platform

Developer ability

Connectivity

Productssupporting PCEHR

CCA Testing

CCACCA

Draft Requirements out today!