180 likes | 325 Views
E-222 Working Group Meeting DEA CSOS Pilot Discussion. March 18, 2002. Agenda. Phase I: Status Phase I: Lessons Learned Phase II: Goals Phase II: Participant Requirements Phase III: Planning Ahead Questions…. Phase I: Status. 21 registered participants in Phase I
E N D
E-222 Working Group Meeting DEA CSOS Pilot Discussion March 18, 2002
Agenda • Phase I: Status • Phase I: Lessons Learned • Phase II: Goals • Phase II: Participant Requirements • Phase III: Planning Ahead • Questions…
Phase I: Status • 21 registered participants in Phase I • 8 digital certificates have been issued • 6 completed test plans have been received (30% return rate to-date): • Mutual Drug • McKesson Corp. • McQueary Bros. Drug Company • Baxter Healthcare Corp. • Mallinckrodt Pharmaceuticals • Purdue Pharmacies LP
Phase I: Lessons Learned • Manual easily retrieved and read – noting some recommended changes! • A couple of screen shots need to be updated in the manual. • No problems with certificate download times or errors. Total test time is averaging about 45 minutes. • Statistics will be compiled and made available once all test plans have been received. • So far so good!!!!
Phase II: Goals • Test forms validation process • Select registered location/POA – begin thinking about who you will select • Download forms • Notarization • Validate submission and adjudication process
Phase II: Participant Requirements • Tester must be affiliated with actual DEA registered location • Forms must be properly notarized
Phase III: Planning Ahead • Identify those participants who are willing and able to commit the resources (time and infrastructure) • Transaction sets should be finalized • Workflows should be baselined
Phase III Target Scope – Key Areas • Order signing • Order verification • Record retention (signed order, linked data, digital certificate)
Phase III Part A) Signing • Order Signing • Identification of “to-be-signed” data • Activation of private key • Signature generation (supported algorithms) • Success Factors/Evaluation Criteria • Data format & technical compatibility—signing approach • Compatibility with current/planned workflow • Scalability (bulk orders, certificate management) • Performance • FIPS compliance
Phase III Part B) – Verification • Order Verification/Processing • Parsing of digital certificate [address, schedules] • Certificate Revocation List (CRL) access/processing • Order validation [integrity check, CRL check, certificate expiry check, date of order] • Success Factors/Evaluation Criteria • Verification logic • Compatibility with current/planned workflow • Archival compliance • Connectivity- support for LDAP through org. firewall • Performance (Internet-based • FIPS compliance
Phase III Part C) – Record Retention • Record Retention • Signed data [Order content] • Certificate data [Linked certificate or attached certificate?, address from certificate] • Linked data [distribution center(s), fill information, receipt information] • Success Factors/Evaluation Criteria • Readily retrievable • Integrity maintenance
Phase III Logistics • How can the group divide and conquer? • … or, can Pilot participation be tailored to the partner’s business category (Pharmacy, Distributor, Manufacturer) • Order Signing—Pharmacies, Distributors • Order Verification —Distributors, manufacturers • Can simplifications be made that ease Pilot development without eliminating lessons learned? • Order generation (existing system vs. word processor) • Order transport (existing system vs. FTP Vs. email) • Will software need to be developed? • If so, how can the development be shared? • If so, can a single toolkit be used?
Phase III Immediate Next Steps • Solidify Phase III Approach • Identify teams (signing, verifying) • Identify order format (EDI 850) • Identify signature approach (inside/outside) • Identify signing toolkit (EDI, Toolkit, other) • Estimate critical path milestones • ID estimated time to complete future workflows • ID estimated time to complete EDI 850 • Begin exploring tech areas ID skill requirements • Develop more detailed Phase III project plan