Imprivata, the healthcare IT security company, announced a new collaboration with DigiCert, a provider of TLS/SSL, IoT, and other PKI solutions and a federally approved certificate authority (CA), to deliver a streamlined, fully integrated workflow for remote identity proofing and give customers more options for meeting U.S. Drug Enforcement Agency (DEA) requirements for electronic prescribing for controlled substances (EPCS).
EPCS continues to gain momentum amongst lawmakers to reduce “doctor shopping” and minimize the risk of altered, stolen or fraudulent prescriptions to help combat America’s opioid and prescription drug abuse epidemic. This October, President Trump signed into law H.R.6 – SUPPORT for Patients and Communities Act, a comprehensive bill designed to address the opioid abuse epidemic. Included in the bill is an electronic prescribing requirement for all controlled substance prescriptions for a covered part D drug under a prescription drug plan. Additionally, 13 states (NY, ME, CT, AZ, NC, RI, IA, OK, TN, VA, MA, CA, and PA) have already enacted legislation containing full EPCS mandates for controlled substances prescribed in those states.
Before practitioners can be issued the two-factor authentication credentials necessary for signing EPCS orders, the DEA stipulates that they must successfully undergo either an institutional or an individual identity proofing process. Imprivata Confirm ID, an end-to-end solution for EPCS, offers a role-based supervised enrollment workflow to automate the institutional identity proofing process. Now, through collaboration with DigiCert, Imprivata Confirm ID also delivers a streamlined, fully integrated workflow for individual identity proofing.
Imprivata Confirm ID offers authentication options such as hands-free authentication, push token notification, and fingerprint biometrics. DigiCert offers two methods for identity proofing, online verification and declaration of identity verification.
Integrating with the DigiCert identity proofing process, Imprivata Confirm ID binds the identity of providers to the authentication modalities they will use for EPCS, allowing them to leverage the full suite of authentication options and establishing a secure, auditable chain of trust.
