The Austrian e-health System Gerfried Fuchs

2 ● SVC - The Company ● The Austrian e-card ● The e-card Project ● GIN - The Austrian Health Information Network Agenda

SVC – The Company

4 SVC – Sozialversicherungs-Chipkarten Betriebs- und Errichtungsges.m.b.H. ● Established in February 2001 (by law § 31b ASVG) ● Owned 100% by “Hauptverband der österreichischen Sozialversicherungsträger” (i.e. Main Association of Austrian Social Security Institutions) ● Organized as private limited company ● Mission of the company: – Establishment, – implementation, – operation and extension of EL-SY using a multi-applicative smart card system within the field of the Austrian Social Security ● Know-how of system development and operation – especially in the areas of health telematics and eGovernment ● A bit over 100 employees

5 The Austrian e-card

66 Front Side = e-card Reverse Side = EHIC The Austrian e-card

77 ● The e-card contains identification data ● The e-card is not a carrier of applications ● The e-card represents the access key to system based services ● The access key (token) is unique within the system ● Lost tokens are locked throughout the system The „Key Card“ Principle

88 ● Social Security Replacement of all paper based health insurance vouchers ● eHealth Keycard for secure handling of medical transactions (basic token for eHealth Telematics) ● eGovernment Signature and encryption card for all fields of applications with corresponding requirements ● eApplications for Third Parties Using infobox concept for keys and authorizations ● eCommerce Signature and encryption card with cooperating partners Extended Vision of e-card Usage

The e-card Project

10 SP 0: System Integration SP 1: Consultation System (operational server centre and terminal software) SP 2: Card System (smart card system and trust centre functions) SP 3: Communications Services (data networks including rollout of GINA and LANCCR) SP 4: Call Center SP 5: Rollout and Training (User Interface in the Medical Practice) SP 6: Administration Client of Social Security Institutions SP 7: Medical Software Producers Division Into Sub Projects

11 Time Schedule Implementation Test Operation Award of Partial Projects Nationwide Roll-out Pilot Medical Practice Med. Practices 3 Out-Patient Dep Med. Practices

12 GIN – The Austrian Health Information Network

13 What is GIN? Health Intranet Connects physicians, pharmacists, hospitals to the network using broadband technology DSL or Cable Modem technology Leased lines Uses MPLS Backbone Centralized assign rules for the GIN Centralized management of the complete network

14 Why Establishing GIN? High Level Requirements concerning IT-Security Quality Availability Scalable bandwith up to 1Gbit access for eg. hospitals

16 ● In order to use this network also for other applications (Secure Internet/ ,…) it is necessary to implement a centralized entry point – the Peering Point – to peer other networks – to bring other applications into this network – to check the compliance of the rules for each application ● A new company was founded owned partly by the chambers of physicians and HVOS – to operate the entry point – to create and control the rules of the GIN – to offer contracts to providers of value added services GIN and Peering Point

17 ● Initial Hardware: – mips (AMD Alchemy Au1550) – 256MB RAM – 256 MB Flash ● New Hardware: – Intel Atom Z510P 1.1GHz with hyperthreading – 1 GB RAM – 4 GB SSD – TPM module Medical Practice Unit (MPU)

18 ● Around Clients spread all over Austria ● Software Updates twice a year, in four steps: – Medical Software Producers – Servers – „300“ – Rest of World – in a single night Medical Practice Unit (MPU)

19 ● Basis System: Debian Lenny – Few additional packages – Software distribution – Rescue partition ● Application Stack: java-based ● Rescue System for problematic cases Medical Practice Unit (MPU)

20 SVC – Sozialversicherungs-Chipkarten Betriebs- und Errichtungsges.m.b.H. Thank you for your attention!