Difference between revisions of "DirectTrust Domain Bound Certificate Activation Information"

From Updox API
Jump to: navigation, search
(Created page with "Updox, LLC. serves as the Health Information Services Provider (HISP) for your practice to enable sending and receiving of Direct messages. Use of this Direct messaging servic...")
 
 
Line 1: Line 1:
−
Updox, LLC. serves as the Health Information Services Provider (HISP) for your practice to enable sending and receiving of Direct messages. Use of this Direct messaging service is governed by the terms and conditions of this agreement.
 
−
Security is the key component that distinguishes Direct messaging from regular email.  Identity verification is a part of the security framework to ensure that senders and receivers are “who they say they are”.  As such, one representative from the practice must successfully pass the identity verification process before the practice can participate in Direct exchange.
 
−
As the practice representative:
 
−
* You acknowledge that you are an authorized representative of the practice.
 
−
* You acknowledge that the practice is compliant with HIPAA privacy and security regulations.
 
−
* You agree to have your identity verified by an external party and to have your verbal attestation recorded as the practice representative.
 
−
* In turn, you acknowledge that the practice has/will verify the identity of other users before enabling them to participate in Direct messaging exchange such that the following requirements are met:
 
−
** Inspect a photo ID, compare picture to the user, and record the ID number;
 
−
AND
 
−
** Verify the user’s name, date of birth, and address through record checks with the applicable agency, credit bureau, state licensure board, e-prescribing authority, or similar database.
 
−
* You agree to keep proof of each user’s identity for at least 7 1/2 years after their employment ends. 
 
−
* For auditing purposes and upon request, you agree to provide documented proof of a user’s identity verification to Updox. You also acknowledge that failure to provide this information may result in the revocation of your Direct messaging credentials.
 
  
−
If you agree to these terms, click Accept.
+
== Key Points ==
−
If you do not agree to these terms, click Decline to exit the process and acknowledge that your practice will not be permitted to participate in Direct messaging with other users in the DirectTrust network.
+
* The DirectTrust Activation process is mandatory to enable Direct messaging with external users.
 +
* The identity verification pertains to a human not a company.
 +
* The information is kept secure via encryption.
 +
 
 +
== Purpose ==
 +
The DirectTrust Activation process is part of the initial implementation of your Direct messaging application and only takes a few minutes. This process enables you to send Direct messages to providers outside of your practice who are also part of the DirectTrust network.
 +
Security is the key component that distinguishes Direct messaging from regular email. In order to exchange Direct messages both the sender and receiver need to validate “who they say they are”. This is accomplished by verifying the identity of each user before issuing a Direct address to them.
 +
 
 +
== Identity Verification ==
 +
Since your EHR vendor is using organizational-level security certificates, only one person (the practice representative) completes the DirectTrust Activation process. That person is then responsible to verify the identity of other users given a Direct address at the practice. Typically, a person’s identity is verified during the hiring process so no further action is usually needed by the representative (e.g. I9 Employment form, copy of passport or driver’s license).
 +
 
 +
== Activation Process ==
 +
The DirectTrust Activation process consists of three parts:
 +
* Government ID verification
 +
* Financial ID verification
 +
* Confirmation code and voice recording
 +
 
 +
== Notes ==
 +
* All the sections of this process pertain to a single “person”. It’s that person’s identity that is being verified, not the practice.
 +
* Concerned about using your credit card as the Financial/Utility ID? Don’t be, this is simply an identity verification and does not affect your credit report or credit score. There is no charge to your card. All the information is kept secure through encryption and your credit card number is not saved.
 +
* If you choose the NPI as your government ID, it must be your individual NPI not the practice NPI.
 +
* If the representative leaves the practice, another person needs to assume the role and complete the identity verification process.

Latest revision as of 00:05, 8 January 2015

Contents

Key Points

  • The DirectTrust Activation process is mandatory to enable Direct messaging with external users.
  • The identity verification pertains to a human not a company.
  • The information is kept secure via encryption.

Purpose

The DirectTrust Activation process is part of the initial implementation of your Direct messaging application and only takes a few minutes. This process enables you to send Direct messages to providers outside of your practice who are also part of the DirectTrust network. Security is the key component that distinguishes Direct messaging from regular email. In order to exchange Direct messages both the sender and receiver need to validate “who they say they are”. This is accomplished by verifying the identity of each user before issuing a Direct address to them.

Identity Verification

Since your EHR vendor is using organizational-level security certificates, only one person (the practice representative) completes the DirectTrust Activation process. That person is then responsible to verify the identity of other users given a Direct address at the practice. Typically, a person’s identity is verified during the hiring process so no further action is usually needed by the representative (e.g. I9 Employment form, copy of passport or driver’s license).

Activation Process

The DirectTrust Activation process consists of three parts:

  • Government ID verification
  • Financial ID verification
  • Confirmation code and voice recording

Notes

  • All the sections of this process pertain to a single “person”. It’s that person’s identity that is being verified, not the practice.
  • Concerned about using your credit card as the Financial/Utility ID? Don’t be, this is simply an identity verification and does not affect your credit report or credit score. There is no charge to your card. All the information is kept secure through encryption and your credit card number is not saved.
  • If you choose the NPI as your government ID, it must be your individual NPI not the practice NPI.
  • If the representative leaves the practice, another person needs to assume the role and complete the identity verification process.
Retrieved from "http://updoxqa.com/wiki/index.php?title=DirectTrust_Domain_Bound_Certificate_Activation_Information&oldid=2983"