View this page "What New Information Are You Seeking?"

7 views
Skip to first unread message

mspohr

unread,
Nov 21, 2008, 12:03:49 PM11/21/08
to EMR Data Use Workshop
We are continuing to receive a good response to our questionnaire. We
have 44 responses so far.
Lots of interesting suggestions so it should be a good workshop.
I've put some of the responses on this page.

What is your most pressing problem that better information could help
solve?

Regards,
Mark Spohr, MD
WHO Geneva


Click on http://groups.google.com/group/emr-data-use-workshop/web/what-new-information-are-you-seeking
- or copy & paste it into your browser's address bar if that doesn't
work.

Ehealth Africa

unread,
Nov 21, 2008, 3:44:51 PM11/21/08
to EMR Data Use Workshop
"No one is talking about the security of the data collected thus I am
interested in learning the importance of identity management, security
and privacy in Africa"

Identity management, security and privacy services are essential parts
of the framework that
healthcare organizations can leverage to address several of the
challenges. Services such as user enrollment, de-activation, and
certificate management enable secure access and efficient management
of all users who connect to the network.
Privacy and security services are critical components for protecting
access to individual desktops, networks and information of all types.
Integrating these services into the IT infrastructure increases
security and productivity.
It also enables fast, efficient access to network resources, patient
data, and applications by supporting
deployment of single sign-on to workstations and applications, secure
remote access and shared
workstation logon. Implementing comprehensive solutions that provide
these services also generates a relatively fast return on investment
because they directly impact clinician productivity,security of IT
systems and information, and the regulatory compliance process.

mspohr

unread,
Nov 22, 2008, 3:21:10 AM11/22/08
to EMR Data Use Workshop
Several people so far have pointed out the importance of patient
identity,
privacy policy, and the security of patient information. We are glad
to see
that people recognize this subject. We will make it a point to have a
focused discussion on these areas.

It would be great if everyone could bring a copy of their policies on
privacy and security to the workshop so that we can compare and
discuss
these.

Does your organization have privacy and security policies?

How well do these work?

What are the crucial elements that make for success or failure here?

Regards,
Mark Spohr,MD
WHO Geneva

Connected Thinking

unread,
Nov 22, 2008, 3:46:15 PM11/22/08
to EMR Data Use Workshop
(i) Does your organization have privacy and security policies?
Yes

Identity management systems that are integrated with smart card-based
authentication devices are an ideal way to tackle several of the
challenges related to network and data security services required by
healthcare organizations. For IT administrators, identity management
systems provide meta-directory capabilities for users’ identity
credentials. They support a single view of their identities throughout
the organization and maintain the consistency of this view across all
connected systems and applications. These solutions can be deployed
to protect identity credentials and access to networks, applications
and data across multiple business processes. They also make it easier
to enroll and update user profiles, manage PKI (Public Key
Infrastructure) certificates, and implement role based security
policies. This versatility enables IT administrators to manage user
accounts, protect network and application access, issue certificates
with a centralized Certificate Authority, and audit user activities
throughout the organization. Smart card devices for end-users can
significantly reduce the cost of deploying and managing PKI systems.

(ii) How well do these work?

a) Windows and application logon from single-user workstation or
laptop
Clinicians can use their smart card device to securely log on to
workstations and laptops running Windows operating systems and
automatically to applications after system logon. This enhances
security by ensuring that only the authorized user can access the
system and authorized applications regardless of location. For logon
to Windows Vista, the device is connected and the clinician presses
CTRL-ALT-DEL to access the logon window. The smart logon credential is
selected and the correct PIN is entered for secure access. Using
password management applications, the system logon process can also be
coupled with application login to save time and avoid the need for
multiple user IDs and passwords. In this scenario, a single smart card
logon can be used for direct access to the PC and patient care
applications.

a) Secure access from a shared kiosk with automatic logoff
After a workstation is idle for a predetermined length of time, the
session can be securely locked; users can also lock their sessions.
Unlike a standard Windows computer lock where only the same user or an
administrator can unlock the session, the smart card solution can be
used with Single Sign-on products to allow any user to unlock the
session and use their smart card device to log on the shared
workstation immediately. If the same user unlocks the workstation
before the session timeout, the user will continue where they left
off. If a new user unlocks the workstation, the previous user’s
session is shut down and a new session is instantiated in a matter of
seconds. Clinicians often need to continue the work started by a
colleague with the same workstation and application that was
previously in use. Using a smart card-based solution integrated with a
password management application, it is possible to lock, but not
close, applications to subsequently enable fast and secure access. To
facilitate this level of seamless access, applications can be
designated not to close after a user logs off or locks the
workstation: they enter a secure mode instead. For example, if a nurse
updates patient information and locks the workstation or logs off, the
application securely locks. Later, a doctor who needs immediate access
to that patient’s record logs on with a smart card device and the
application unlocks without reloading to provide immediate access.

b) Secure VPN access from a laptop needing remote access
Healthcare organizations can use smart card devices with VPN client
applications for certificate-based authentication to enhance the
security of their remote access systems. This also increases
productivity by enabling healthcare employees to work remotely and
respond to patients as needed. Certificate-based authentication can be
selected using the VPN client interface and the certificate with the
desired Certificate DN (Distinguished Name), validity date range, and
issuing authority is selected. When the smart card device is used, the
VPN client application displays the PIN dialogue box, the correct PIN
is entered and the secure VPN connection is established.

c) E-mail encryption
E-Mail encryption protects the message content so only the sender and
the intended recipients can read it, strengthening the security of
patient information and other sensitive information for secure
communication and collaboration among clinicians. For example,
treatment options or comments about a medical journal article can be
exchanged in confidence between the sender and recipients. Messages
are encrypted using the public key of the recipient’s encryption
certificate. When the messages are received, they are then deciphered
using the private key from the recipient’s encryption certificate
which is stored on the smart card device.

d) Digital signature for electronic health records
In Microsoft Outlook messages and Office (Word, Excel and PowerPoint)
documents, digital signatures are used to authenticate the identity of
the person signing the document. They can be used to sign electronic
health records and are considered to be legally valid. The signature
is created using the digital certificate stored on the smart card
device and is validated by comparing it with a trusted Certificate
Authority’s database to confirm its legitimacy and validity. Microsoft
applications will confirm the digital signature by displaying a
message that the signature is OK. Digital signatures also are used to
verify the identity of the e-mail message sender and the signer of a
document. This ensures that the original message or document arrives
unchanged. Applications can also digitally encrypt and sign messages
and documents.

b) What are the crucial elements that make for success or failure
here?

Identity management systems and smart card-based authentication
devices provide several tangible benefits for healthcare
organizations, including: a) Highly favorable and rapid ROI due to
faster access to network resources, reduced password support costs,
streamlined identity management, and risk reduction b) Enhanced
security for logon, remote access, patient information and sensitive
data c) Optimization of patient throughput and clinician productivity
with fast secure access and services such as digital signature and
single sign-on to workstations and applications d) More convenient and
secure PKI systems – credentials stored on the smart card device are
more portable and safer than those stored on a PC f) Improved
utilization of IT resources with integrated identity management
services, reduced password support requirements, and streamlined
integration with third-party devices and services g) Efficient and
streamlined process for any quality control or compliance

For doctors and clinicians, these solutions offer fast, secure and
easy-to-use access to workstations, applications, and patient
information regardless of care location. With convenient access to the
IT resources they need, healthcare workers are more productive and
have more time to spend with patients. In addition, security-enhanced
communications facilitate collaboration among healthcare organizations
and caregivers who are dedicated to providing the highest levels of
patient care. Hence success outweighs failure.

Titus Ngeno
Software Architect
Cerner/Perceptive Corp

Alfred Nyero

unread,
Nov 24, 2008, 3:12:18 AM11/24/08
to emr-data-u...@googlegroups.com
Hello,
We are currently using the paper bases system and there are lots of problems associalted with this system. The major one being patient Identification issues. E.g. A patient gets a number at OPD, and gets a different number in the lab, and a different one at the HIV clinic, how can this patient be counted as one individual? I would like to know how the EMR can help solve this problem.
Thanks.
Alfred

--
Alfred . N . Oyo
P.O.Box 16524, K'la

Imran

unread,
Nov 24, 2008, 5:24:45 AM11/24/08
to EMR Data Use Workshop
Hello to All,

It will be very fortunate for me that i will be in EMR Data use
workshop and share the best practices with you regarding the usage of
EMR .

I just want to know about the integration of EMR data into one
centralized system.The facility (at District Level), Public and
Private Hospital capturing the data using EMR system. I am intresting
to know about the mechanism for Data Integration into the centralized
place they adopt ?.


Best Regards,

Imran Ahmed
e Health Coordinator



On Nov 24, 1:12 pm, "Alfred Nyero" <alfredny...@gmail.com> wrote:
> Hello,
> We are currently using the paper bases system and there are lots of problems
> associalted with this system. The major one being patient Identification
> issues. E.g. A patient gets a number at OPD, and gets a different number in
> the lab, and a different one at the HIV clinic, how can this patient be
> counted as one individual? I would like to know how the EMR can help solve
> this problem.
> Thanks.
> Alfred
>
>
>
>
>
> On Fri, Nov 21, 2008 at 8:03 PM, mspohr <mhsp...@gmail.com> wrote:
>
> > We are continuing to receive a good response to our questionnaire.  We
> > have 44 responses so far.
> > Lots of interesting suggestions so it should be a good workshop.
> > I've put some of the responses on this page.
>
> > What is your most pressing problem that better information could help
> > solve?
>
> > Regards,
> > Mark Spohr, MD
> > WHO Geneva
>
> > Click on
> >http://groups.google.com/group/emr-data-use-workshop/web/what-new-inf...
> > - or copy & paste it into your browser's address bar if that doesn't
> > work.
>
> --
> Alfred . N . Oyo
> P.O.Box 16524, K'la- Hide quoted text -
>
> - Show quoted text -

Denis Kaffoko

unread,
Nov 24, 2008, 6:58:54 AM11/24/08
to emr-data-u...@googlegroups.com
Hello
i get your feeling here,but its very easy with EMR to use only one ID and you can use that ID on the encounter forms say the return forms the lab forms any form as long you maintain the ID as one and unique to an individual.that should be easy
--
Denis Kaffoko
+256 782763811
+256 712510064
Data manager
IDC
Mbale Regional Hospital

Jackson Kubuke

unread,
Nov 24, 2008, 8:33:32 AM11/24/08
to emr-data-u...@googlegroups.com
The EMR centralized system is whereby the single data entries move from the sytem to the Web-based EMR where you can network all facility data even (1000 facilities) at one place. If you have resources it is very intresting system because during the data entry from different facilities you can do monitoring, data management and provide technical assistance intime.

 
 

Thanks,
 
Jackson Kubuke
Data Manager
Columbia University MSPH Tanzania LLC.


> Date: Mon, 24 Nov 2008 02:24:45 -0800
> Subject: [EMR Data Use] Re: View this page "What New Information Are You Seeking?"
> From: imran.pr...@gmail.com
> To: emr-data-u...@googlegroups.com

Imran Ahmed

unread,
Nov 25, 2008, 2:27:31 AM11/25/08
to emr-data-u...@googlegroups.com
Although the web-based EMR is the effective and good way for Data Transmission and for Centralized Data integration.but in some of the countries like Pakistan only 65- 70 %Districts have the Internet connectivity provision.What will be done rest of the facilities in Districts which d'nt have the functionality of Internet connection , so that centralized data will be kept?
 
Thanks,
 
Imran Ahmed,
e Health Coordinator

Jackson Kubuke

unread,
Nov 25, 2008, 5:48:57 AM11/25/08
to 345 234
Dear Alfred, The patient ID should be assigned at one place and being used for all health units as unique numbers so as to easy Patient identification. As you pointed out the ID's number from your country has been assigned at OPD, LAB or any other hospital this was not rightly identifier as these numbers should not be consistent sometimes. The best way is to use the one entry ID's assigned at HIV/AIDS clinic and being used for all health services at the hospital departments. The identification number should apply for any services for facility A AND EVEN at facility B, C, D etc.
 
Thanks more will be discussed in Dar.
 
Jackson Kubuke

 
 
 





Date: Mon, 24 Nov 2008 11:12:18 +0300
From: alfre...@gmail.com
To: emr-data-u...@googlegroups.com

Subject: [EMR Data Use] Re: View this page "What New Information Are You Seeking?"

Jackson Kubuke

unread,
Nov 25, 2008, 6:07:13 AM11/25/08
to 345 234
Dear team, I would like to respond before the workshop on the issue I pointed out based on centralized system by the use of web-based EMR.
 
Responses:
I understand that, most of the facilities no internet connection but I would like to share with team that, to design web-based EMR does not mean only for internet connection. The following can be used: -
  • Internet connection (WAN networked).
  • Intranent connection (with one WAN networked connection) for facilities within 450 Kms you can use the local network and be managed centrally.
  • Ex PHP connection(not necessary of internent connection) desing network and use bouster to locate data centrally.
 
From the above, no need of internent connection but thats why I said in my ealier email that, we need the very high resource allocation to purchase the drivers, bit rate of computers so like, in order to design the materialized equipments for the connection.
 
Thanks, centralized system we need to invest in human resource as well as in material, and financial resource through training and mentorship activities.
 
O.K see then,
 
Jackson Kubuke


 
 





Date: Tue, 25 Nov 2008 12:27:31 +0500
From: imran.pr...@gmail.com
To: emr-data-u...@googlegroups.com

Bailey, Christopher

unread,
Nov 25, 2008, 6:13:58 AM11/25/08
to emr-data-u...@googlegroups.com

Perhaps another item to consider in Dar.

 

How does level of connectivity and structure of networks affect data use?  

 

Clearly, there are some uses of data from EMRs that would require a larger network or a 'mixed media' network (paper and electronic systems) than stand alone systems at the facility.

 

How have people approached this problem? Do people use 'sneaker net'? (eg hand delivery of paper reports or memory sticks between facilities or to a central hub when connectivity is not available?)

 

How does this change what you can do with the data, both in terms of timeliness but also types of analysis?

 

 

Christopher Bailey

Health Care Informatics

World Health Organization

 




</html

Connected Thinking

unread,
Nov 28, 2008, 6:05:20 AM11/28/08
to EMR Data Use Workshop
Greetings to all ! A note for you to browse as you plan for the
logistics for your upcoming Workshop. I wanted to share a couple of
background themes that I am dealing with in my work and look forward
to conversing with you on them.

I have spend my time is spent worrying about the overall community.
I frame the overall objective as "health of a targeted population" and
"transparency" for the process, financing and outcomes delivered.

How about grouping activities in terms of service delivery, molecule
based supply chain, information supply chain, financial supply chain,
and overall management. Umbrella to all of this should be the
communitication of results and progress highlighting our transparency
and taking out friction themes.

While US based problems are a joke compared to those of Africa- the
need to provide infrastructure is the same. For states such as West
Virginia and Alaska, the terrain and connectivity issues are
similar.

Some logical groupings of IT infrastructure needed to accomplish the
objective....

1. Information Supply Chain: IT services for the service delivery and
workflow. The Electronic Medical Record. The lab system. Radiology,
etc.
2. A Community Health Bank such that people can have access to their
own data via cell phones - empower the person and enlist pharma
partners to the large amounts of data.
3. Financial Supply Chain: Administrator services of "claims" to fund
and pay the health care system. I would be curious to learn much
about right models here. Keeping in mind funding would bend towards
creating incentives for physicians/community health workers to keep
people healthy in first place vs just encounter based transactions.
Eg- there should be both a physicial and virtual "Medical Home"
concept. That is why the Health Bank model is important. Another key
part of this is the creation of lights on dashboards that are
transmitted via website. If everything is driven by the IT system,
the ability to defraud the system go down.

At the population level we might design approaches for....

1. Prenatal, Birth, up to 1 year, stop HIV transmission from mother to
child, reduce infant,mother mortality, Breast feeding, Birth Centers,
Nurse Midwives
2. Pediatrics, well child, malaria, immunization
3. Family Planning, Condoms, HIV campaigns
4. Working Well, keep productive people on the job
5. The Chronic and Expensive few- high concentration on pharma and
services, HIV, TB, Need Health Coach management & partnership with
Pharma
6. Death with Dignity- use of home hospice vs go to the hospital to
die for those who will not have access to escalated services

My best regards.

Titus

Egondu Onyejekwe

unread,
Dec 2, 2008, 9:34:53 AM12/2/08
to emr-data-u...@googlegroups.com
LAB TRACKER
We will present Lab Tracker by Ground Zero Software in California, USA. It is currently being used at the Enugu State University Teaching Hospital.
 
Thanks.
Ego



CEO, EARTHMAP Foundation- HIV/AIDS
ego...@gmail.com
+1-614-327-7649 (US Mobile)
+234-703-864-9661 (Nigerian Mobile)

Enny Handayani

unread,
Dec 3, 2008, 10:29:09 PM12/3/08
to EMR Data Use Workshop
There is much interest in patient's Unique ID and How Do You Use Data.
What about how to ensure that the data you use are actually a good
quality data? What's the good of using data if the data being used are
not a good quality one? I am assuming that most of the data are
entered manually from paper forms as data source. Issues with manual
entry are, 1) prone to transcription error, 2) depending on patient
load at clinic, it may cause backlog and delay (not timely) 3) also
heavy patient load will require more manpower to enter data manually.
I am interested to see how people ensure the data quality.
Thanks,
Enny Handayani
Institute of Human Virology

On Dec 2, 9:34 am, "Egondu Onyejekwe" <ego...@gmail.com> wrote:
> LAB TRACKER
> We will present Lab Tracker by Ground Zero Software in California, USA. It
> is currently being used at the Enugu State University Teaching Hospital.
>
> Thanks.
> Ego
>
> On Fri, Nov 28, 2008 at 6:05 AM, Connected Thinking
> <Titus.Ng...@gmail.com>wrote:
> --
> Prof. Egondu Rosemary Onyejekwe
> Visiting Professor, Health Informatics
> Federal University Of Technology, Owerri
Reply all
Reply to author
Forward
0 new messages