![Page 1: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/1.jpg)
European Interoperability of Identification Management in eHealthDr. Ramin Tavakolianwith Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc Lange (EHTEL); Dr. Karl A. Stroetmann, Daniel Spichtinger, (empirica, Bonn / DE)
Central Research Institute of Ambulatory Health Care in Germany, Herbert-Lewin-Platz 2 - 10623 Berlin; E-Mail: [email protected]; Tel.: 0049-30-4005-2418
![Page 2: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/2.jpg)
2Bern, 18.5.2006 - Tavakolian
i2Health project background
Growing awareness that emerging eHealth applications might stop at European borders
Multiple policy drivers for eHealth interoperability• Citizen mobility
• Free healthcare market (limited EU-responsibility)
• Decision of the European Court of Justice
• Border regions
• Pressure from stakeholder groups
![Page 3: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/3.jpg)
3Bern, 18.5.2006 - Tavakolian
The European Parliament "notes the importance of providing an efficient and secure method of exchanging patient records between Member States„ Draft report on patient mobility and healthcare developments in the European Union, 20.12.2004
"Interoperability is the corner stone supporting citizens mobility and patient centred care„ Report of the High Level Group on Health Services and Medical Care (to the Council of the EU), Dec. 2004
"Establish a platform with a mandate and the necessary resources to facilitate co-operation between European Member States with support of the European Commission to promote e-health interoperability for the mobile citizen." Report of the eHealth Standardisation Focus Group, Feb. 2005
"The high level e-Health forum ... will be able to set up working groups on specific topics, one of which should obviously be interoperability.„ Opinion of the Committee of the Regions on the Action Plan for a European eHealth Area, 22.03.2005
Specific policy drivers
![Page 4: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/4.jpg)
4Bern, 18.5.2006 - Tavakolian
Objectives• focus on fundamental interoperability issues
• analyse priority applications relating to e.g. e-prescription, electronic patient record and messaging
• develop a roadmap and concrete projects involving all relevant actors
EU Support Action: i2-Health - the Interoperability Initiative for a European eHealth Area
Workplan ElementsGeneric elements
• Conceptual framework (WP1)
• Analysis of infrastructure concepts and building blocks (WP2)
Specific subjects for in-depth analysis
• Identification management of actors, organisations and fundamental interoperability issues (WP3)
• Workflow interoperability – e-prescribing and messaging (WP4)
![Page 5: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/5.jpg)
5Bern, 18.5.2006 - Tavakolian
ID management in eHealth – Difference to the conventional setting
Identification and authentication of actors in healthcare is a mixture of administrative measures, common sense, and personal human interaction.
This needs to be trustworthy! (thoroughly designed for its whole life-cycle)
To fake a physician in conventional setting you need an office, yellow pages listing, big desk, nice manners, framed diplomas, trusting employees, etc...
To fake a physician in the electronic world you just need a digital certificate file
![Page 6: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/6.jpg)
6Bern, 18.5.2006 - Tavakolian
ID management in eHealth
Just emerging on national level• Natural persons (citizens, patients, health care
professionals)
• Institutions (care providers, insurance organisations)
Less advanced for other entities (e.g. systems components, messages, etc.)
Requirements for use cases not comprehensively defined (e.g. administrative vs. medical patient identification)
European use cases?
![Page 7: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/7.jpg)
7Bern, 18.5.2006 - Tavakolian
Generating an eHealth ID
Identity Provider
CARA
Actor
AttributeSource
Generation of IdentifierProduction of token
De
livery o
f ele
ctron
ic ID/to
ken
Registration
Requests eH
ealth Identity
Specific to eHealth ID of individuals is the attribute (MR Jones + physician)
![Page 8: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/8.jpg)
8Bern, 18.5.2006 - Tavakolian
Utilizing an eHealth ID
Identity Provider
RA, CA
Requestere.g physician
AttributeSource
Asks for serviceSupplies ID (+ Auth.) data
Asks for verification
Confirm
s Indentity
Trusted Third Party
Decidere.g. hospital with EPR
Grants access
![Page 9: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/9.jpg)
9Bern, 18.5.2006 - Tavakolian
i2Health Interoperability Model
Jurisdiction 2
Function A
Ag
ree
me
nt
Political
Organisational
Semantic
Technical
Political
Organisational
Semantic
Technical
Interface; M
app
ing
; Tran
slation
...
Bottom-up
Top-down
Jurisdiction 1
‘I2-Health eHealth Interoperability Model
Function A
![Page 10: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/10.jpg)
10Bern, 18.5.2006 - Tavakolian
Layer Model of ID ManagementWhat is the legal base for issuing/using the identifier
How is the registering process organised?
Which identifier is to be used?
On which support is the identifier available?
Organisational
Semantic
Technical
Registration procedures, verification procedures
Data models, identifiers, numbering systems
Certificates, ID-tokens (e.g. cards), directory databases, networking infrastructure
Political / LegalLegislation, nomination of responsible authorities, definition of covered entities
![Page 11: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/11.jpg)
11Bern, 18.5.2006 - Tavakolian
Technical Layer of ID
On which support is the identifier available?
There are European initiatives working on the interoperability of this layer
• eEHIC
• Netc@rds
• HPC standardisation
Technical Certificates, ID tokens (e.g. cards), directory databases, networking infrastructure
![Page 12: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/12.jpg)
12Bern, 18.5.2006 - Tavakolian
Semantic Layer of ID
What quality does the identifier have?
Domain• Definition of sector or entity group
• Application of global object ID schemes
Semantic
![Page 13: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/13.jpg)
13Bern, 18.5.2006 - Tavakolian
Persistency of identifiersBiometric identification is utmost permanent
• No alterations or revocations are possible
• If copied and maliciously used no defence option exist
“Almost” permanent identifiers are e.g. Social security numbers
• Alteration or revocation organisationally difficult
Usability & Implementation ease
Misuse & Privacy defence
Permanent Temporary
Tailored Persistency
![Page 14: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/14.jpg)
14Bern, 18.5.2006 - Tavakolian
Semantic Layer of ID
Internal or public?
Semantic
Example 1: UPIN (USA)Unique lifelong physician identification number
Mandatory for Medicare/Medicaid scheme
Established 1993
Publicly available in directories (www.upinregistry.com)
6-digit alpha-numeric
Crucial transactions bound to an internal billing-ID
Example 2: BAN (Germany)Unique lifelong physician identification number
Mandatory for all physicians
Established 2003
Internal within chambers
8-digit alpha-numeric
![Page 15: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/15.jpg)
15Bern, 18.5.2006 - Tavakolian
Semantic load
Additional information carried by identifiers• Sex (e.g. odd or even digit in Danish social security
number)
• Date of birth (frequently visible in social security/health insurance numbers)
• Region of occupational residence (e.g. German physicians number)
Potential collision with privacy aspects
Difficulties arise when carried information becomes invalid (e.g. sex change)
![Page 16: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/16.jpg)
16Bern, 18.5.2006 - Tavakolian
Organisational Layer of ID
How is the registration process organised?
What elements are to be identified?1. Individual or juridical persons
• Health Care Professionals• Patients• Insurance Providers• Health care institutions• Others (Government, Research)
Organisational Registration policy
![Page 17: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/17.jpg)
17Bern, 18.5.2006 - Tavakolian
The sum of details causes the problem
MS X MS Y
Organisational
Semantic
Patient transport services are not recognized as healthcare services in country D
The professions “speech therapist”, “dietary consultant” and “podologist” are neither registered or protected in country C
Being spouse of a general practitioner is the only attribute of several thousands of individuals who participate in healthcare in country B
For opening an electronic prescription the identification of both the institution and the employee is required in nation E
A patient may not have an EHIC because he/she is not covered by a social security scheme in country A
![Page 18: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/18.jpg)
18Bern, 18.5.2006 - Tavakolian
The Interoperability Issue
• Are all entities comparables?• Are the registration authorities
recognised across borders?• Are the registration procedures
recognised across borders?
• Are the identifiers usable across borders?
• Are their formats acceptable across borders?
MS X MS Y
Organisational
Semantic
![Page 19: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/19.jpg)
19Bern, 18.5.2006 - Tavakolian
Solution - Approach
• Define priority use cases• Mobile patient
• Mobile health care professional
• Cross border health message
• Analyse existing base matched with interoperability layer model
• Perform a gap analysis
• Facilitate solutions
![Page 20: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/20.jpg)
20Bern, 18.5.2006 - Tavakolian
Use case 1a: mobile insured (administrative) EHIC
Organisational
Semantic
Technical
Registration procedures exercised by MS
EHIC identifiers (Insured and insurance providers)
Eye-readable EHIC, Code list database of insurance providers
Political / Legal European regulations 1408/71, 574/72, Decisions no. 189-191, …
![Page 21: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/21.jpg)
21Bern, 18.5.2006 - Tavakolian
Use case 1b: Medical ID
Is the Insured ID from the EHIC usable • By all information systems within an hospital?
• By other eHealth services such as • On-line booking?
• Access to on-line electronic health records?
• ePrescribing services?
• Some categories of (potential) patients are out of the “EHIC scheme” (7% of the population in Germany, Civil servants from EU …)
• Consent required
• Harborer of medical information frequently independent from insurance provider
![Page 22: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/22.jpg)
22Bern, 18.5.2006 - Tavakolian
• A physician from nation A shall utilize his/her electronic proof of professional attribute in nation B
• Electronic document e.g. on a health professional card shall be accessed by authorities
• Identity and professional attribute must be confirmed
Use case 2: Mobile health care professional
![Page 23: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/23.jpg)
23Bern, 18.5.2006 - Tavakolian
Use case 3: Cross border health message
• Patient medical data shall be transmitted by a physician in nation A to a colleague in nation B
• E-mail address of recipient must be located
• Identity and professional attribute of recipient must be confirmed
• Message linked to a patient ID must be securely transmitted
• Receiving physician must receive confirmation of ID and professional attribute of the sender
![Page 24: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/24.jpg)
24Bern, 18.5.2006 - Tavakolian
ID management in eHealth- one touchstone for interoperability
Workshop on March 20&21, 2006 in Amsterdam, NL
• Jointly organised by the Dutch ministry of Health, NICTIZ (NL), EHTEL, and i2Health
• 3 parallel sessions including 81 experts from 21 nations
• Results:
• Raised problem awareness
• Best practice exchange among MS
• Recommendations of cross border ID utilisation
WS-Proceedings incl. summary and conclusions are available at: http://www.nictiz.nl/
![Page 25: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/25.jpg)
25Bern, 18.5.2006 - Tavakolian
eHealth-ID Workshop on March 20&21, 2006 in Amsterdam, NL – extract of results
1. The electronic communication of medical data calls forthe highest level of security.2. As a healthcare professional, you have to prove who youare and what you are e.g. mrs.J.A. Claassen, generalpractitioner.3. There is a need to identify who is responsible for ID management in each country.4. The patient should be in the lead in reading and havingaccess to his record.5. There should always be logging.6. There should be an adequate system of supervising thelogging process.
![Page 26: European Interoperability of Identification Management in eHealth Dr. Ramin Tavakolian with Dr. Gerhard Brenner (ZI, Berlin, DE); Dr. Stephan Schug, Marc](https://reader033.vdocuments.site/reader033/viewer/2022061618/56649d2a5503460f949ff094/html5/thumbnails/26.jpg)
26Bern, 18.5.2006 - Tavakolian
Contact:
Dr. Ramin Tavakolian
Zentralinstitut für die kassenärztliche Versorgung
Herbert-Lewin-Platz 2
D-10623 Berlin
Germany
EMail: [email protected]
Tel.: (+49) 30 - 4005-2418
www.i2-health.org