Health service providers
Health service providers can use their Health Digital Identity to:
- prove they are who they say they are as required when delivering digital health services
- prove they have the authority to undertake a task or transaction (eg, a nurse practitioner ordering a laboratory test)
- securely prove their qualifications and credentials as required on a timely basis (eg, junior doctors moving from one hospital to another)
- enable self-provision access to DHB’s applications
- ensure that the person they are exchanging patient’s information with is the right person.
Health service consumers
Health service consumers can use their Health Digital Identity to:
- establish their eligibility and entitlement to a service
- store delegation information (ie, when another person has granted them access to their health information or to make health-related decisions on their behalf)
- digitally give their consent for selected parties to access their health information, which may significantly shorten the time and effort required to complete a process or transaction.
Health care organisations
Health care organisations can use Health Digital Identity to:
- verify job applicants’ identity and qualifications digitally and in real time, reducing the risk of selecting inappropriately skilled staff, as well as saving staff time and resources required to do manual verification using paper documents
- digitally obtain patient’s (or their delegate’s) consent on various occasions to speed up lifesaving processes (eg, to seek agreement on organ donation).
Examples of possible use
Dr Hog registered with an Identity Provider to obtain a Health Digital Identity, which he uses to prove his qualification to his employer and to access various applications used by his employer.
This diagram shows the steps involved for Dr Hog to register for a digital identity, and for the DHB to establish Dr Hog’s access to their IT applications.
The digital identity includes:
- date of birth
- passport number
- RA number
- Medical Council number
- Certificate of Practice.
Dr Hog registered with the Ministry of Health to obtain a digital identity
- Step 1: Dr Hog requests enrolment to the Digital Identity System. This enrolment is through the identity provider (eg, the Ministry of Health).
- Step 2a: The identity provider sends a request to the National Passport Registry (eg, DIA) to verify passport details.
- Step 2b: The identity provider sends a request to the NZ Medical Council to verify the Certificate of Practice.
- Step 3a: The National Passport Registry sends the identity provider verification of the passport details.
- Step 3B: The NZ Medical Council sends the identity provider verification of the Certificate of Practice.
- Step 4: The identity provider issues credentials to Dr Hog.
DHB establishing Dr Hog’s access to their IT applications
- Step 1: Dr Hog provides Digital Identity attributes to the DHB HR Solution.
- Step 2: The DHB HR solution sends the Digital Identity Attributes and Dr Hog's employment details to the DHB IAM.
- Step 3: The DHB IAM sends a request for credential verification to the identity provider.
- Step 4: The identity provider sends an assertion back to the DHB IAM.
Steps 3 and 4 are optional once Dr Hog is established in the DHB IAM.
- Step 5: The DHB IAM provides Dr Hog’s access rights to DHB admin and clinical applications.
Jo gave her consent digitally to the Ministry of Education to access her daughter Mary’s immunisation status when enrolling Mary in early childhood education.
- Step 1: Jo sends a request to the ECE’s enrolment page, to enrol Mary to ECE program.
- Step 2: The ECE’s enrolment page sends a request for credential verification that Jo is Mary’s delegate to Jo’s identity provider.
- Step 3: Jo’s identity provider sends an assertion back to the ECE’s enrolment page.
- Step 4: The enrolment page sends a request for Jo’s consent to check Mary’s immunisation status.
- Step 5: Jo consented.
- Step 6: The ECE’s enrolment page sends Jo’s consent and her digital identity to the ECE’s enrolment application.
- Step 7: The enrolment application sends the Ministry of Health a request for confirmation that Mary has met all immunisation milestones, with Jo’s consent and her digital identity.
- Step 8: The Ministry sends Jo’s identity provider a request for credential verification that Jo is Mary’s delegate.
- Step 9: Jo’s identity provider sends an assertion back to the Ministry of Health.
- Step 10: The Ministry sends Mary’s immunisation status to the ECE’s enrolment application.
- Step 11: The enrolment application confirms to the ECE’s enrolment page whether enrolment is successful.