Connecticut Ave NW, Washington, DC :00 pm EDT, October 3, (626) # 1

Connecticut Ave NW, Washington, DC Agenda Welcome and new member greetings DTAAP, industry update, and news from members. Presentation from MiHIN – “Identity Exchange Hub: Trusted Provider and Consumer Identities” Workgroup updates Open discussion and comment “You are the most trusted names in Healthcare Exchange” 2

Connecticut Ave NW, Washington, DC DirectTrust Members 142 and Counting….. 3 3

Connecticut Ave NW, Washington, DC DirectTrust Members 142 and Counting…. 4

Connecticut Ave NW, Washington, DC New Members Prosocial Applications, Inc IOS Health Systems Ready Computing Inc HealthBridge RazorInsights, LLC Sujansky and Associates, LLC HealthShare Exchange of Southeastern Pennsylvania, Inc 5

Connecticut Ave NW, Washington, DC Renewing Members 6

Connecticut Ave NW, Washington, DC Newest Accreditations Health Companion RelayHealth Axesson 7

Connecticut Ave NW, Washington, DC Facts and figures, August,  145 member organizations  Coop Agreement extended another year  20 fully accredited and audited HISPs, 13 CA/RAs  20 candidate status HISPs, 2 CA/RAs  37 HISPs in trust anchor bundles  50+ HIEs and 250+ certified EHRs supported  29,000 health care organizations supported  420,000+ Direct accounts/addresses provisioned  8 million Direct messages past 13 months  450,000 Direct messages for Stage 2 Meaningful Users in month of July, 2014

Connecticut Ave NW, Washington, DC Identity Exchange Hub Trusted Provider and Consumer Identities

Connecticut Ave NW, Washington, DC Why are we doing this? Improve identity verification to reduce fraud Leverage and use the identity proofing processes of other trusted organizations Reduce IT staff workload (fewer account creations) Reduce number of IDs and passwords for providers and participants Improve security through standard processes Leverage State’s investment in Michigan Identity Credentialing and Access Management (MICAM) 10

Connecticut Ave NW, Washington, DC Creation of the HICAM Federation HICAM Federation Identity Exchange Hub HICAM Federation Identity Exchange Hub Health Systems Qualified Organizations Direct Secure Messaging HISPs Statewide Health Provider Directory State of Michigan MICAM Federation Participants(providers) Protocols Policies Practices Health Plans Consent and Advanced Directive Registries Gift of Life Registry (organ donors) Health Identity Credentialing and Access Management (HICAM) federation is an alliance of organizations who agree to abide by a common set of protocols, policies and practices (the three P’s) 11

Connecticut Ave NW, Washington, DC Creation of the HICAM Federation HICAM Federation Identity Exchange Hub HICAM Federation Identity Exchange Hub Personal Health Records (PHRs) Medicaid Member Portal (MyHealthPortal) Direct Secure Messaging HISPs Statewide Consumer Directory State of Michigan MICAM Federation Participants (consumers) Protocols Policies Practices Patient Portals Advanced Directive Registries Consent Management Systems for standard behavioral health consents Health Identity Credentialing and Access Management (HICAM) federation is an alliance of organizations who agree to abide by a common set of protocols, policies and practices (the three P’s)

Connecticut Ave NW, Washington, DC Trusted, federated identities for healthcare Federated Identity Management (FIDM) in general consists of: PROTOCOLS: The technical connectivity between systems Expand Single-Sign-On (SSO) across organizational boundaries Standards include OASIS, SAML 2.0, XACML NIST Levels of Assurance (LOA) POLICIES: Legal and Trust Framework development Legal agreements establishing “trust beyond reproach” Federated Sharing Organization Agreement (FSOA) Use Case Agreements (UCAs) PRACTICES: Process implementation Process workflow – precise series of steps User Acceptance Testing (UAT) Monitor the process – end to end walk through with participants 13

Connecticut Ave NW, Washington, DC Protocols: Technical and Logical Connectivity Currently connected Service Providers (for providers): – Beaumont Hospital – MiHIN Biometric LOA 3 Identity Provider – MiHIN Active Directory Identity Provider – Statewide Health Provider Directory (HPD) (Salesforce.com) – Direct Secure Messaging HISPs Planned Service Providers for consumers: – Personal Health Records (PHRs) and Patient Portals MS-Healthvault NoMoreClipBoard Patient portals determined by Health Systems – Consent and Advanced Directive Registries Gift of Life Registry (organ donors) Peace of Mind registry (living wills, DNRs, durable powers of attorney) Standard Consent Management Systems (CMS) 14

Connecticut Ave NW, Washington, DC LOA 3 Identity Registration System and Identity Provider Created an Identity Provider (IdP) capable of registering LOA 3 credentials for the HICAM federation Setting up identity proofing processes at USPS retail locations, Secretary of State offices and onsite at other health systems/plans (e.g. Beaumont Hospital) 15 First Provider, Dr. Robert Jackson registering for LOA 3 with biometric

Connecticut Ave NW, Washington, DC Biometrics as Second Factor 16 Fujitsu Palm Scanners Iris Scanners

Connecticut Ave NW, Washington, DC USPS Digital Credential Process MiHIN Identity Registration Step 1 Provider presents credentials to passport clerk at USPS retail outlet passport window (or Secretary of State, other sites) Step 2 Obtain secure biometric identity by scanning palm and/or iris Step 3 Register provider and link biometric template to provider account information Step 4 Digital credential created. Palm/iris scanner can now be used to login, or secure id and password can be used

Connecticut Ave NW, Washington, DC Identity Registration Screens 18 Welcome to trusted identity enrollment

Connecticut Ave NW, Washington, DC Confirm Person (HPD lookup) 19 Statewide Health Provider Directory query results

Connecticut Ave NW, Washington, DC Confirm Person (verify ids) 20 Identity Proofing

Connecticut Ave NW, Washington, DC Select Biometric Form Capture 21 Picture alternately could be utilized for facial recognition in the future

Connecticut Ave NW, Washington, DC Capture Palm 22

Connecticut Ave NW, Washington, DC Registration Completed 23

Connecticut Ave NW, Washington, DC Provider & Consumer Use Cases Use Case for Identity Providers (IdPs): Many health systems and health plans (including Medicaid) will stand up their own Identity Providers (IdPs) Provide the trusted identities that Identity Exchange Hub federates IdPs must conform to HICAM Protocols from Implementation Guide Use Case for Service Providers (SPs): Service Providers under HICAM consist of services such as: – Direct HISPs – Statewide Health Provider Directory – EHRs – Health and Medicaid systems inside state firewalls via MICAM – Health registries outside state firewalls such as: Peace of Mind (Advance Directives e.g. Living Wills) Gift of Life (Organ donors) Consent registries (standard consents at CMHs, clinical trial consents) Trusted identities from an IdP can be used for SSO between SPs SPs must conform to HICAM Protocols from Implementation Guide 24

Connecticut Ave NW, Washington, DC Thank you Please send questions/inquiries to: Jeff Livesay – Associate Director Brian Seggie – Director of Security

Connecticut Ave NW, Washington, DC Workgroup Reports Patient and Consumer Participation in Direct – Lucy Johns and Leslie Kelly Hall Directory Policy – Bruce Schreiber and Jim Fisher Security and Trust Compliance – Luis Maas and Jeff McDonald Trust Anchor Bundle Operations – Greg Meyer Certificate Policy and Practices – Don Jorgenson Clinical Transitions of Care – Holly Miller and David Kibbe 26

Connecticut Ave NW, Washington, DC Discussion David C. Kibbe MD, President and CEO DirectTrust.org Lucy Johns, MPH Independent Consultant 27