Protect your personal data, Electronic Health Records, professional smartcards and more. Access to health information must be increasingly easy and fast, without compromising confidentiality in any way.
Evidian offers identity and access management solutions that are tailored to the specific requirements of healthcare establishments (high staff turnover, 24/7 operations). Our solutions simplify the allocation and use of access rights so that doctors can give patients their full attention.
As roles are pre-defined on the basis of the duties and departments of each staff member, you can be sure that only authorised staff can access the right information at the right time. Evidian solutions guarantee that you can meet the confidentiality requirements for medical ethics and the CNIL (French Data Protection Agency).
With Evidian solutions, doctors are identified using a smartcard or badge – no password is needed on any terminal. If the card or electronic badge is lost, Evidian offers a range of secure backup identification solutions for immediate emergency access. For example, the most recent Evidian innovation, QRentry, lets you unlock a session with your smartphone using a QR code.
In hospitals and elsewhere, there is a trend for increasing use of personal mobile terminals. Evidian solutions give doctors fully secure access to patient information from their medical surgery, using their smartphone or tablet. These solutions can also be used for establishing mobile sessions for bedside access in hospitals.
For interns, placement students, external staff, staff-managed devices, etc. Ensuring that individuals are held responsible for their actions means that personal access to information must be granted for each level of authorisation. By using automated identity management solutions, Evidian can rapidly deliver customised access rights. Kiosk mode allows the management of fast user switching on multi-user terminals, ensuring both efficiency and confidentiality.
Hospitals are responsible for the confidentiality of medical data. With Evidian solutions, not only you can divide up access rights, but also rapidly assess the measures taken and present an access record for checks and audits.
Vaudois University Hospital Center CHUV - A Swiss hospital renews its access rights management solution.
“Evidian was the best candidate; the report on its results was the most complete.” Ludovic Vadot considered. “For this ambitious project, we needed a high degree of reactivity and a software editor that combined durability guarantee and flexibility. With hindsight, the short time limit delays we demanded always led to success. We succeeded in implementing a productive tripartite collaboration between the hospital, the software editor and the integrator”.
Evidian Identity and Access Management solution has been successfully deployed by Nantes University Hospital (Centre Hospitalier Universitaire de Nantes). The European Identity & Cloud Award 2015 for “Best Identity and Access Management Project” went to the Nantes University Hospital for its innovative approach in solving healthcare issues.
The Nantes University Hospital project involved setting up a multi-functional corporate smart card, and optimizing identity and authorization management. Implementing the Evidian solution has strengthened the Hospital’s security policy when it comes to accessing medical data, in particular to comply with the national confidentiality directive.
The identity management project involves 12,000 employees, more than 2,000 external staff, 7,000 workstations and more than twenty application; with a 20% annual turnover and job rotation of medical personnel. The roll-out of the solution at Nantes University Hospital has been backed up by change management support for users, involving senior management from the Hospital and its Corporate Communications Department.
“The Evidian solution manages the kind of complex scenarios typically found in a university hospital: rapid switchover of a PC session in shared mode, roaming sessions for the same user logging on to different PCs in the same day… Evidian also manages the workflow of authorizations, from the point where a new employee joins the hospital (upstream provision of user IDs, implementation of rights policies) to their departure (removal of identities and rights),” explained Cedric Cartau, Information Systems Security Manager at Nantes University Hospital.
“We valued the solution’s ability to implement authorization policies that are not only set centrally, but must also be defined by the departments actually responsible for policies in their own functional areas: the software knows how to do it all, but it still has to be expressed unambiguously,” Cedric Cartau added.
Warrington and Halton Hospital déploie la solution Enterprise SSO d’Evidian pour ses postes de travail client lourds et légers afin de simplifier et sécuriser l’accès aux applications de l’hôpital pour ses 2500 collaborateurs des unités de soins. Il réalise l’authentification forte au moyen de la carte nationale et du certificat « CfH card ».
Le CHU d’Angers, utilisateur des fonctions de gestion d’identité et d’accès d’Evidian depuis de nombreuses années, a décidé de faire évoluer la solution actuelle par la mise en place de la Suite IAM d’Evidian pour un périmètre étendu à 7200 utilisateurs. Cette solution inclut la gestion des identités, des habilitations, l’authentification forte par carte CPS et RFID et le SSO client lourd, client léger et web.
L’EPSM du Morbihan a mis en œuvre la Suite IAM d’Evidian pour la création de son référentiel d’identités, l’alimentation et la synchronisation des référentiels existants, l’authentification forte à base de certificats CPS et le SSO.
L’EPSM du Morbihan exploite actuellement la solution pour 1500 utilisateurs.
Sint Franciscus hospital (Rotterdam, NL) chose Evidian for its IAM and SSO solutions and knowhow of the healthcare sector to ensure that personal health data remains confidential.
EPSM decided to strengthen security while eliminating the constraints of passwords, using instead healthcare professional smart card for authentication.