Update 2019
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Health Digital Identityworld of health
It is a collection of many different pieces of information (attributes) about an entity in a digital format that have been creditably verified
Depending on the type of transaction, the attributes needed from the entity to complete that transaction could be different
4
Participants can be sure that other parties they are transacting with are who
they claim they are.
Participants feel safer sharing their information with other participants in the
ecosystem, and they have control over what they share.
Digital identity services are cost effective and easy to use.
Participants can trust that others participating in the ecosystem are following
the system rules and that they accept the obligations of their designated role.
The digital identity solution is secure, resilient and interoperable 5
Patient and clinical safety
Improve user experience
Healthcare organisations and facilities
Consent and delegation
Be responsive to issues of equity and accessibility
Give due recognition to the Treaty of Waitangi
Accept that the attributes of personal identity can evolve over time
Comply with New Zealand legislation, regulation and social licence
Provide an exemplary digital identity-based authentication service
Comply with Standards
government
International trends
Relationships: Family/whanau and caregivers
INFORMATION PROVIDERS
Giving consent through a personal information app lets Lucy fully control and have a record of which information is used for which service.
Having control over her information in one place means Lucy can use it to shorten processes , save time , make other services easier .
1.
2.
Enrol at university
SERVICES
Lucy is 18 and wants to: enrol at university open a bank account prove she is vaccinated for
her OE.
Solution development • Phase 1 – proof of concept
• Proposed ecosystem model can deliver the objectives • Technology is available and scalable • Supplier and consumers will participate • Cost effective to the sector • Organisations can adopt in a modular manner
• Phase 2 – confirm design of solution model and develop implementation roadmap • Phase 3 – development and implementation of solution
Framework development • Health Digital Identity Trust Framework
• Rules and governance • Relationship with our current health identifier
• Health Digital Identity Standards Framework and relevant standards 15
16
services
maintenance of the Health
transactions
parties with attributes from the identity
providers and exchanging attributes of
proof of identity
Health Digital Identity and Health Identifiers are used for different purposes
Health Identifiers are used to uniquely identify health events that happen to an entity or are performed by an entity in the health ecosystem whether digitally or not, without revealing the entity’s identity unless necessary.
Health Digital Identity is used by entities participating in a health digital transaction to prove who they say they are to the other parties collaborating in the same transaction.
It is possible that a Health Digital Identity may be linked to multiple Health identifiers. 17
Yes
However we legislated against this is 1993
• Digital authentication is designed to answer the question ‘Is that you?’ • Digital solutions using information they have to establish that the person
accessing my account or device is me (e.g. a PIN, password, biometric identifier or other form factor)
• Digital identification is intended to answer the question ‘Who are you?’ • Using a recognised trusted party to digitally prove I am the person I said I
am
19
20
based on his scope of practice
3b. Attributes verified
4. Issue credential
a Health Digital Identity credential
• Name • DOB • Sex • Passport# • CPN • RA # • Scope of practice
Identity Information
Verification service
3a. Request to verify CPN, RA# and Scope of practice
HPI
DHB
Admin
Applications
These steps are optional once Dr. Hogg is established in the DHB s IAM
DHB
Clinical
Applications
7. Inform Dr.Hogg s access rights
Health Digital Identity could be stored in the form of a
“Digital wallet”
Health Digital Identity could be implemented in the form of:
• A chip
• Health Digital Identity Data Composition Standard started
Supporting policy and guidelines
• Health Digital Identity Trust Framework first draft to be completed March 2020
Proof-of-Concept
23
Supporting Standards
Revision to existing standards Consumer Health Identity Standard – HISO 10046 Well adopted at present; will be reviewed in relation
to DI requirement
1. Standard to be renamed so not to confused with Digital
Identity 2. New NHI fields to be developed/added (sg. Gender, Sex, Iwi,
Pacific Islands reference) to Standard 3. Public consult and acceptance
Changes published and adoption commenced
Changes added to National systems Changes adopted by sector early adopter
Changes adopted by most of the sector –
ongoing monitoring of standard adoption and application
Health Provider Index Standard (clinicians, organisations, facility only) – HISO 10045
Well adopted at present; will be reviewed in relation to DI requirement
1. Decision about what changes is required (including South Island enhancements)
2. New fields to be developed/added (eg. Iwi, NZBN, Non-RA
members, Relationships, Teams) to Standard 3. Public consult and acceptance
Changes published and adoption commenced Changes added to National systems Adopted by sector early adopters
Changes adopted by the most of sector – ongoing monitoring of standard adoption and application
Systems and Devices Naming Standard – HISO 10049
(To be led by Interoperability TWG - may include aspects of/from the HPI, HISF, - other agencies doing similar things e.g. Education
Video conferencing end points Standard development and public consultation completed.
Others: in development
Others: public consultation completed, standards published
Video conferencing end points adoption completed
Others: Adopted by most of the sector
Changes fully adopted by the sector – ongoing monitoring of standard adoption and application
Health Information Security Framework – HISO 10029 Well adopted at present; will be reviewed in relation to DI and other requirements
Desired update to be decided, developed and release for public consultation.
Updates acceptance Changes adopted by some of the sector
Changes fully adopted by the sector – ongoing monitoring of standard adoption
and application
Limited adoption at present; will be reviewed in relation to DI and other requirements
Operational model being identified and developed. Changes to go to public consultation
New document published and adoption commenced
Standard adopted by most of the sector – ongoing monitoring of standard application
New Standards Health Digital Identity Data Composition Standard – HISO ???
Initial scoping and Development Complete draft standard development DIA agreement achieved Public consultation undertaken
Published and adoption commenced Standard fully adopted by the sector – ongoing monitoring of standard application
Health Digital Identity Assurance Framework – HISO ??? Initial scoping Standard development including public consultation Published and adoption commenced Standard fully adopted by the sector – ongoing monitoring of standard application
Supporting Policies and Guidelines Health Digital Identity Trust Framework (covering Consent, delegations, information sharing, monitoring, etc.)
Initial scoping Draft completed and released for sector consultation Public consultation Published and adoption commenced
Guideline adopted by the sector – ongoing monitoring of application
Rules to link Health Identifiers to Digital Identities Initial scoping Draft completed and released for sector consultation Public consultation Published and adoption commenced
Guideline adopted by the sector – ongoing monitoring of application
PoC Solution development and pilot rollout PoC selected use cases and confirm solution approach PoC option and use cases recommended by the
TWG Solution options confirmed, and business case to proceed with solution selection approved.
Solution development Solution selection approved.
Develop business case to obtain funding
Development completed for pilot rollout
Solution rollout Pilot system rollout completed.
It is a collection of many different pieces of information (attributes) about an entity in a digital format that have been creditably verified
Depending on the type of transaction, the attributes needed from the entity to complete that transaction could be different
4
Participants can be sure that other parties they are transacting with are who
they claim they are.
Participants feel safer sharing their information with other participants in the
ecosystem, and they have control over what they share.
Digital identity services are cost effective and easy to use.
Participants can trust that others participating in the ecosystem are following
the system rules and that they accept the obligations of their designated role.
The digital identity solution is secure, resilient and interoperable 5
Patient and clinical safety
Improve user experience
Healthcare organisations and facilities
Consent and delegation
Be responsive to issues of equity and accessibility
Give due recognition to the Treaty of Waitangi
Accept that the attributes of personal identity can evolve over time
Comply with New Zealand legislation, regulation and social licence
Provide an exemplary digital identity-based authentication service
Comply with Standards
government
International trends
Relationships: Family/whanau and caregivers
INFORMATION PROVIDERS
Giving consent through a personal information app lets Lucy fully control and have a record of which information is used for which service.
Having control over her information in one place means Lucy can use it to shorten processes , save time , make other services easier .
1.
2.
Enrol at university
SERVICES
Lucy is 18 and wants to: enrol at university open a bank account prove she is vaccinated for
her OE.
Solution development • Phase 1 – proof of concept
• Proposed ecosystem model can deliver the objectives • Technology is available and scalable • Supplier and consumers will participate • Cost effective to the sector • Organisations can adopt in a modular manner
• Phase 2 – confirm design of solution model and develop implementation roadmap • Phase 3 – development and implementation of solution
Framework development • Health Digital Identity Trust Framework
• Rules and governance • Relationship with our current health identifier
• Health Digital Identity Standards Framework and relevant standards 15
16
services
maintenance of the Health
transactions
parties with attributes from the identity
providers and exchanging attributes of
proof of identity
Health Digital Identity and Health Identifiers are used for different purposes
Health Identifiers are used to uniquely identify health events that happen to an entity or are performed by an entity in the health ecosystem whether digitally or not, without revealing the entity’s identity unless necessary.
Health Digital Identity is used by entities participating in a health digital transaction to prove who they say they are to the other parties collaborating in the same transaction.
It is possible that a Health Digital Identity may be linked to multiple Health identifiers. 17
Yes
However we legislated against this is 1993
• Digital authentication is designed to answer the question ‘Is that you?’ • Digital solutions using information they have to establish that the person
accessing my account or device is me (e.g. a PIN, password, biometric identifier or other form factor)
• Digital identification is intended to answer the question ‘Who are you?’ • Using a recognised trusted party to digitally prove I am the person I said I
am
19
20
based on his scope of practice
3b. Attributes verified
4. Issue credential
a Health Digital Identity credential
• Name • DOB • Sex • Passport# • CPN • RA # • Scope of practice
Identity Information
Verification service
3a. Request to verify CPN, RA# and Scope of practice
HPI
DHB
Admin
Applications
These steps are optional once Dr. Hogg is established in the DHB s IAM
DHB
Clinical
Applications
7. Inform Dr.Hogg s access rights
Health Digital Identity could be stored in the form of a
“Digital wallet”
Health Digital Identity could be implemented in the form of:
• A chip
• Health Digital Identity Data Composition Standard started
Supporting policy and guidelines
• Health Digital Identity Trust Framework first draft to be completed March 2020
Proof-of-Concept
23
Supporting Standards
Revision to existing standards Consumer Health Identity Standard – HISO 10046 Well adopted at present; will be reviewed in relation
to DI requirement
1. Standard to be renamed so not to confused with Digital
Identity 2. New NHI fields to be developed/added (sg. Gender, Sex, Iwi,
Pacific Islands reference) to Standard 3. Public consult and acceptance
Changes published and adoption commenced
Changes added to National systems Changes adopted by sector early adopter
Changes adopted by most of the sector –
ongoing monitoring of standard adoption and application
Health Provider Index Standard (clinicians, organisations, facility only) – HISO 10045
Well adopted at present; will be reviewed in relation to DI requirement
1. Decision about what changes is required (including South Island enhancements)
2. New fields to be developed/added (eg. Iwi, NZBN, Non-RA
members, Relationships, Teams) to Standard 3. Public consult and acceptance
Changes published and adoption commenced Changes added to National systems Adopted by sector early adopters
Changes adopted by the most of sector – ongoing monitoring of standard adoption and application
Systems and Devices Naming Standard – HISO 10049
(To be led by Interoperability TWG - may include aspects of/from the HPI, HISF, - other agencies doing similar things e.g. Education
Video conferencing end points Standard development and public consultation completed.
Others: in development
Others: public consultation completed, standards published
Video conferencing end points adoption completed
Others: Adopted by most of the sector
Changes fully adopted by the sector – ongoing monitoring of standard adoption and application
Health Information Security Framework – HISO 10029 Well adopted at present; will be reviewed in relation to DI and other requirements
Desired update to be decided, developed and release for public consultation.
Updates acceptance Changes adopted by some of the sector
Changes fully adopted by the sector – ongoing monitoring of standard adoption
and application
Limited adoption at present; will be reviewed in relation to DI and other requirements
Operational model being identified and developed. Changes to go to public consultation
New document published and adoption commenced
Standard adopted by most of the sector – ongoing monitoring of standard application
New Standards Health Digital Identity Data Composition Standard – HISO ???
Initial scoping and Development Complete draft standard development DIA agreement achieved Public consultation undertaken
Published and adoption commenced Standard fully adopted by the sector – ongoing monitoring of standard application
Health Digital Identity Assurance Framework – HISO ??? Initial scoping Standard development including public consultation Published and adoption commenced Standard fully adopted by the sector – ongoing monitoring of standard application
Supporting Policies and Guidelines Health Digital Identity Trust Framework (covering Consent, delegations, information sharing, monitoring, etc.)
Initial scoping Draft completed and released for sector consultation Public consultation Published and adoption commenced
Guideline adopted by the sector – ongoing monitoring of application
Rules to link Health Identifiers to Digital Identities Initial scoping Draft completed and released for sector consultation Public consultation Published and adoption commenced
Guideline adopted by the sector – ongoing monitoring of application
PoC Solution development and pilot rollout PoC selected use cases and confirm solution approach PoC option and use cases recommended by the
TWG Solution options confirmed, and business case to proceed with solution selection approved.
Solution development Solution selection approved.
Develop business case to obtain funding
Development completed for pilot rollout
Solution rollout Pilot system rollout completed.
Related Documents
