Health Digital Identityworld of health
It is a collection of many different pieces of information
(attributes) about an entity in a digital format that have been
creditably verified
Depending on the type of transaction, the attributes needed from
the entity to complete that transaction could be different
4
Participants can be sure that other parties they are transacting
with are who
they claim they are.
Participants feel safer sharing their information with other
participants in the
ecosystem, and they have control over what they share.
Digital identity services are cost effective and easy to use.
Participants can trust that others participating in the ecosystem
are following
the system rules and that they accept the obligations of their
designated role.
The digital identity solution is secure, resilient and
interoperable 5
Patient and clinical safety
Improve user experience
Healthcare organisations and facilities
Consent and delegation
Be responsive to issues of equity and accessibility
Give due recognition to the Treaty of Waitangi
Accept that the attributes of personal identity can evolve over
time
Comply with New Zealand legislation, regulation and social
licence
Provide an exemplary digital identity-based authentication
service
Comply with Standards
government
International trends
Relationships: Family/whanau and caregivers
INFORMATION PROVIDERS
Giving consent through a personal information app lets Lucy fully
control and have a record of which information is used for which
service.
Having control over her information in one place means Lucy can use
it to shorten processes , save time , make other services easier
.
1.
2.
Enrol at university
SERVICES
Lucy is 18 and wants to: enrol at university open a bank account
prove she is vaccinated for
her OE.
Solution development • Phase 1 – proof of concept
• Proposed ecosystem model can deliver the objectives • Technology
is available and scalable • Supplier and consumers will participate
• Cost effective to the sector • Organisations can adopt in a
modular manner
• Phase 2 – confirm design of solution model and develop
implementation roadmap • Phase 3 – development and implementation
of solution
Framework development • Health Digital Identity Trust
Framework
• Rules and governance • Relationship with our current health
identifier
• Health Digital Identity Standards Framework and relevant
standards 15
16
services
maintenance of the Health
transactions
parties with attributes from the identity
providers and exchanging attributes of
proof of identity
Health Digital Identity and Health Identifiers are used for
different purposes
Health Identifiers are used to uniquely identify health events that
happen to an entity or are performed by an entity in the health
ecosystem whether digitally or not, without revealing the entity’s
identity unless necessary.
Health Digital Identity is used by entities participating in a
health digital transaction to prove who they say they are to the
other parties collaborating in the same transaction.
It is possible that a Health Digital Identity may be linked to
multiple Health identifiers. 17
Yes
However we legislated against this is 1993
• Digital authentication is designed to answer the question ‘Is
that you?’ • Digital solutions using information they have to
establish that the person
accessing my account or device is me (e.g. a PIN, password,
biometric identifier or other form factor)
• Digital identification is intended to answer the question ‘Who
are you?’ • Using a recognised trusted party to digitally prove I
am the person I said I
am
19
20
based on his scope of practice
3b. Attributes verified
4. Issue credential
a Health Digital Identity credential
• Name • DOB • Sex • Passport# • CPN • RA # • Scope of
practice
Identity Information
Verification service
3a. Request to verify CPN, RA# and Scope of practice
HPI
DHB
Admin
Applications
These steps are optional once Dr. Hogg is established in the DHB s
IAM
DHB
Clinical
Applications
7. Inform Dr.Hogg s access rights
Health Digital Identity could be stored in the form of a
“Digital wallet”
Health Digital Identity could be implemented in the form of:
• A chip
• Health Digital Identity Data Composition Standard started
Supporting policy and guidelines
• Health Digital Identity Trust Framework first draft to be
completed March 2020
Proof-of-Concept
23
Supporting Standards
Revision to existing standards Consumer Health Identity Standard –
HISO 10046 Well adopted at present; will be reviewed in
relation
to DI requirement
1. Standard to be renamed so not to confused with Digital
Identity 2. New NHI fields to be developed/added (sg. Gender, Sex,
Iwi,
Pacific Islands reference) to Standard 3. Public consult and
acceptance
Changes published and adoption commenced
Changes added to National systems Changes adopted by sector early
adopter
Changes adopted by most of the sector –
ongoing monitoring of standard adoption and application
Health Provider Index Standard (clinicians, organisations, facility
only) – HISO 10045
Well adopted at present; will be reviewed in relation to DI
requirement
1. Decision about what changes is required (including South Island
enhancements)
2. New fields to be developed/added (eg. Iwi, NZBN, Non-RA
members, Relationships, Teams) to Standard 3. Public consult and
acceptance
Changes published and adoption commenced Changes added to National
systems Adopted by sector early adopters
Changes adopted by the most of sector – ongoing monitoring of
standard adoption and application
Systems and Devices Naming Standard – HISO 10049
(To be led by Interoperability TWG - may include aspects of/from
the HPI, HISF, - other agencies doing similar things e.g.
Education
Video conferencing end points Standard development and public
consultation completed.
Others: in development
Others: public consultation completed, standards published
Video conferencing end points adoption completed
Others: Adopted by most of the sector
Changes fully adopted by the sector – ongoing monitoring of
standard adoption and application
Health Information Security Framework – HISO 10029 Well adopted at
present; will be reviewed in relation to DI and other
requirements
Desired update to be decided, developed and release for public
consultation.
Updates acceptance Changes adopted by some of the sector
Changes fully adopted by the sector – ongoing monitoring of
standard adoption
and application
Limited adoption at present; will be reviewed in relation to DI and
other requirements
Operational model being identified and developed. Changes to go to
public consultation
New document published and adoption commenced
Standard adopted by most of the sector – ongoing monitoring of
standard application
New Standards Health Digital Identity Data Composition Standard –
HISO ???
Initial scoping and Development Complete draft standard development
DIA agreement achieved Public consultation undertaken
Published and adoption commenced Standard fully adopted by the
sector – ongoing monitoring of standard application
Health Digital Identity Assurance Framework – HISO ??? Initial
scoping Standard development including public consultation
Published and adoption commenced Standard fully adopted by the
sector – ongoing monitoring of standard application
Supporting Policies and Guidelines Health Digital Identity Trust
Framework (covering Consent, delegations, information sharing,
monitoring, etc.)
Initial scoping Draft completed and released for sector
consultation Public consultation Published and adoption
commenced
Guideline adopted by the sector – ongoing monitoring of
application
Rules to link Health Identifiers to Digital Identities Initial
scoping Draft completed and released for sector consultation Public
consultation Published and adoption commenced
Guideline adopted by the sector – ongoing monitoring of
application
PoC Solution development and pilot rollout PoC selected use cases
and confirm solution approach PoC option and use cases recommended
by the
TWG Solution options confirmed, and business case to proceed with
solution selection approved.
Solution development Solution selection approved.
Develop business case to obtain funding
Development completed for pilot rollout
Solution rollout Pilot system rollout completed.