Dutch nationwide Electronic Health Record why the centralised services architecture? Ir. Karel de Smet, principal IT architect WICSA 2011, June 23th Boulder CO, USA

© Logica All rights reserved Many, small sized, independent healthcare providers Each provider has to maintain a health record for each patient Healthcare providers in the Netherlands GP practice general practitioner assi stent 4500 pharmacy phar macist assi stent 2500 hospital medical specialist assi stant 150 other healthcare provider healthcare professional assi stant patient / client

© Logica All rights reserved GpIS = GP Information System PhIS = Pharmacy Information System HIS = Hospital Information System LIS = Laboratory Information System Each xIS contains a local EHR (electronic health record), which cannot be queried across discipinary and organisational boundaries Healthcare Information Systems other healthcare provider hospital pharmacy GP practice PhIS xISLIS healthcare professional assi stant phar macist assi stent GpIS general practitioner assi stent HIS medical specialist assi stant

© Logica All rights reserved Enable queries across boundaries, with minimum impact for healthcare providers and their XIS-suppliers Nationwide EHR other healthcare provider hospital pharmacy GP practice PhIS xISLIS GpIS HIS Nictiz NSP HIB Health Information Broker VPN healthcare professional assi stant phar macist assi stent general practitioner assi stent medical specialist assi stant

© Logica All rights reserved Registering health records other healthcare provider hospital pharmacy GP practice PhIS xISLIS GpIS HIS Nictiz NSP HIB VPN REC record locator PhISGpISHIS healthcare professional assi stant phar macist assi stent general practitioner assi stent medical specialist assi stant

© Logica All rights reserved Querying patient data other healthcare provider hospital pharmacy GP practice PhIS xISLIS GpIS HIS Nictiz NSP HIB VPN REC query access point PhIS GpIS HIS Q QQQ QRY healthcare professional assi stant phar macist assi stent general practitioner assi stent medical specialist assi stant

© Logica All rights reserved Collecting patient data other healthcare provider hospital pharmacy GP practice PhIS xISLIS GpIS HIS Nictiz NSP HIB VPN REC query access point PhIS GpIS HIS QRY A2A3A1 healthcare professional assi stant phar macist assi stent general practitioner assi stent medical specialist assi stant

© Logica All rights reserved Returning patient data other healthcare provider hospital pharmacy GP practice PhIS xISLIS GpIS HIS Nictiz NSP HIB VPN REC query access point PhIS GpIS HIS QRY A2 A3 A1 healthcare professional assi stant phar macist assi stent general practitioner assi stent medical specialist assi stant

© Logica All rights reserved Protecting patient data other healthcare provider hospital pharmacy GP practice PhIS xISLIS GpIS HIS Nictiz NSP HIB VPN PKI PKI smartcards AUTLOGI&A identification & authentication authorisation protocol patient consent access log REC QRY healthcare professional assi stant phar macist assi stent general practitioner assi stent medical specialist assi stant

© Logica All rights reserved Nationwide EHR Advantages : uniform solution for whole of the Netherlands for all patients and all medical applications qualification enforces compliance patient rights have been established security transparant security enforced by HIB Disadvantages : government project gets full attention of press: stubborn misunderstandings public and political resistance solid but expensive solution new legislation needed… Nictiz HIB AUTLOGI&A REC ZABQRY

HIS GP GpIS PhIS HIBxIS Pharmacist Specialist other register record query patient data return patient data update record locator update log update record locator consult record locator authorise query

© Logica All rights reserved Why the centralised services? Current centralised services architecture: alle messages pass through HIB more message-oriented HIB allows for man-in-the-middle HIB easily becomes monolytic HIB may become bottle-neck Why not a distributed services architectuur? all messages exchanged directly between endpoints more service oriented (?) separate record locator service separate authorisation service separate logging service

© Logica All rights reserved Registering health record other healthcare provider hospital pharmacy GP practice PhIS xISLIS GpIS HIS NSP REC service VPN PhISGpISHIS AUT service LOG service healthcare professional assi stant phar macist assi stent general practitioner assi stent medical specialist assi stant

© Logica All rights reserved Requesting authorisation ticket other healthcare provider hospital pharmacy GP practice PhIS xISLIS GpIS HIS NSP VPN REC service PhIS GpIS HIS T R LOG service healthcare professional assi stant phar macist assi stent general practitioner assi stent medical specialist assi stant AUT service

© Logica All rights reserved Finding records with relevant patient data other healthcare provider hospital pharmacy GP practice PhIS xISLIS GpIS HIS NSP VPN PhIS GpIS HIS REC service PhIS GpIS HIS QT AUT service LOG service healthcare professional assi stant phar macist assi stent general practitioner assi stent medical specialist assi stant

© Logica All rights reserved Querying patient data other healthcare provider hospital pharmacy GP practice PhIS xISLIS GpIS HIS NSP VPN REC service PhIS GpIS HIS QB QT AUT service LOG service healthcare professional assi stant phar macist assi stent general practitioner assi stent medical specialist assi stant

© Logica All rights reserved Collecting patient data other healthcare provider hospital pharmacy GP practice PhIS xISLIS GpIS HIS NSP VPN REC service PhIS GpIS HIS A3A2A1 AUT service LOG service healthcare professional assi stant phar macist assi stent general practitioner assi stent medical specialist assi stant

© Logica All rights reserved Logging the access to patient data other healthcare provider hospital pharmacy GP practice PhIS xISLIS GpIS HIS NSP VPN REC service PhIS GpIS HIS LOG service L3L2L1 AUT service healthcare professional assi stant phar macist assi stent general practitioner assi stent medical specialist assi stant

© Logica All rights reserved Security other healthcare provider hospital pharmacy GP practice PhIS xISLIS GpIS HIS NSP REC service VPN AUT service LOG service PKI I&A Identification & Authentication I&A healthcare professional assi stant phar macist assi stent general practitioner assi stent medical specialist assi stant

HIS GP GpIS PhIS RecxIS Pharmacist Specialist other register record return record locations AutLog get record locations issue ticket request ticket query patient data log acces return patient data

© Logica All rights reserved Which is better? Capacity Scalability Flexibility Reusability Simplicity Security Modifiability Compliance Service level Scope control Distributed: + no bottle-neck + services separately scalable + XIS may optimize pattern + easier –XIS has N points of access –Security more complex –no bridging –risk for cartel formation –hard to monitor + primitive services Centralised: –bottle-neck for bulk –HIB scalable as a whole –fixed query pattern –requires HIB modification + XIS has 1 point of access + Security simpler + may bridge incomp versions + control over community + easily monitored –compound query service easily extended

© Logica All rights reserved Conclusion Centralised services architecture, with HIB: good to start with less complexity voor XIS’es Distributed services architecture, separate services: more room for innovation more difficult to manage service levels and version compatibility However, politics quit funding the Nationwide EHR: computer illiterates perceive HIB as a big privacy threat cost cuttings sought because of financial crises Nictiz has to find another funder

Logica is a business and technology service company, employing 39,000 people. It provides business consulting, systems integration and outsourcing to clients around the world, including many of Europe's largest businesses. Logica creates value for clients by successfully integrating people, business and technology. It is committed to long term collaboration, applying insight to create innovative answers to clients’ business needs. Logica is listed on both the London Stock Exchange and Euronext (Amsterdam) (LSE: LOG; Euronext: LOG). More information is available at Questions? Logica xxx Visitor address Street Postcode City Country Contact: Name Function T: +XX (0) F: +XX (0) E:

© Logica All rights reserved Centralised Services Distributed Services xis HIB recaut qry log i&a xis recaut log