uaf case study by medimpact
TRANSCRIPT
![Page 1: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/1.jpg)
©2015MedImpact,Inc.Allrightsreserved.
ThecontentsofthispresentationareconfidentialandproprietarytoMedImpactHealthcareSystems,Inc.andmaycontainmaterialMedImpactconsidersTradeSecrets.Thispresentationmaynotbereproduced,transmitted,published,ordisclosedtootherswithoutMedImpact’spriorwrittenauthorization.
MedImpactandFIDOACaseStudyofaUAFDeploymentFIDO Alliance SeminarWashington DCOct 6th 2015
Presented by Steven Secker
MedImpactHealthcareSystems,Inc.
![Page 2: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/2.jpg)
©2015MedImpact,Inc.Allrightsreserved.
TopicsforthisCaseStudy
•WhyFIDOforMedImpact?•OurUseCases•DeploymentStrategy:WheretoStart&Why•WhyFIDOUAFratherthanFIDOU2F?• FuturePlans•Discussion/Q&A
![Page 3: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/3.jpg)
©2015MedImpact,Inc.Allrightsreserved.
WhatMedImpactDoes:PBMMedImpactmanagespharmacybenefitsformorethan50millionlivesaroundtheglobe
PharmacyBenefitManager
Claim
ApprovalCopayAmount
Drug-to-DrugWarnings
Invoice
Health InsuranceCompany
PayPharmacyforApprovedClaims
![Page 4: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/4.jpg)
©2015MedImpact,Inc.Allrightsreserved.
SoWhyFIDO?
PharmacyBenefitManager
Claim
ApprovalCopayAmount
Drug-to-DrugWarnings
Invoice
Health InsuranceCompany
PayPharmacyforApprovedClaims
Allofthisstuffisbehindthescenesasfarastheaverageconsumeris
concerned.
SowheredoesFIDOfit?
![Page 5: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/5.jpg)
©2015MedImpact,Inc.Allrightsreserved.
OurBusinessRequiresDataAccess
![Page 6: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/6.jpg)
©2015MedImpact,Inc.Allrightsreserved.
ITSecurityinHealthcare:HIGHPRIORITY!
![Page 7: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/7.jpg)
©2015MedImpact,Inc.Allrightsreserved.
HealthcareDataTargetedSpecifically
“Yourmedicalinformationisworth10timesmorethanyourcreditcardnumberontheblackmarket.”
![Page 8: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/8.jpg)
©2015MedImpact,Inc.Allrightsreserved.
LikeEveryoneElse,We’veReliedonPasswords
Foryearswe’veknowthisisbroken,buttherewasn’taclearlybetterwayuntilFIDO!
![Page 9: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/9.jpg)
©2015MedImpact,Inc.Allrightsreserved.
UseCasesforMedImpact
MembersofHealthInsurancePlans:
• Whatdrugsarecovered?• What’smycopayforthisdrug?• DoIneedaPriorAuthorization?• HaveImetmydeductible?• Whatpharmaciesareinmynetwork?• HowmuchdidIspendonprescriptionsfortaxesor
FlexSpendingAccount(FSA)reimbursement?• HowgoodhaveIbeenabouttakingmymaintenance
meds(gettingthemrefilledontime)?
![Page 10: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/10.jpg)
©2015MedImpact,Inc.Allrightsreserved.
UseCasesforMedImpact
HealthcareProviders:
• Whatotherdrugsismypatienttakingthatotherdoctorsprescribed?
• Hasmypatientbeentakinghisorhermaintenancemeds(gettingthemrefilledontime)?
![Page 11: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/11.jpg)
©2015MedImpact,Inc.Allrightsreserved.
UseCasesforMedImpact
Pharmacists:
• HaveIbeenaccuratelyreimbursedforalltheclaimsI’vesubmitted?
![Page 12: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/12.jpg)
©2015MedImpact,Inc.Allrightsreserved.
UseCasesforMedImpact
HealthInsuranceCompanies,MCOs,HMOs,Self-InsuredPlans:
• ManageMemberEligibility• BenefitDesign• FormularyManagement• PriorAuthorizationManagement• ManageDeniedClaimsAppeals• Allmanorofreporting
![Page 13: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/13.jpg)
©2015MedImpact,Inc.Allrightsreserved.
UseCasesforMedImpact
MedImpactEmployeesauthorizedtoaccessproductiondata
![Page 14: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/14.jpg)
©2015MedImpact,Inc.Allrightsreserved.
UserCommunityProfiles– WheretoStart?#ofUsers FrequencyofUse OS/Browser Mobile
BrowerApp
PotentiallyMillions
+90daysbetweenvisits
AllUncontrolled Yes Future
PotentiallyThousands
VariesGreatly
WindowsIE11/Firefox
No NoPlans
TensofThousands
WeeklytoMonthly WindowsIE11/Firefox No
NoPlans
Thousands Daily WindowsIE11/Firefox
No Future
Thousands Daily WindowsIE11/Firefox
NoPlans
NoPlans
![Page 15: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/15.jpg)
©2015MedImpact,Inc.Allrightsreserved.
SecurityandUsability– ROIforUserCommunities
![Page 16: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/16.jpg)
©2015MedImpact,Inc.Allrightsreserved.
UAFvs.U2F• Followtheleadofearly
deployments (Google,Dropbox)
• Userexperience buildsontopofongoodold,familiarusernamepassword
• Lesspotential forconfusionaboutusingmultiple computers
U2F
UAF
• Getsridofthepasswordcompletely
• Usersalwayshavetheirphones,andmillions ofthosephoneshavefingerprintreaders
Arguably,U2Fwouldhavebeenaneasierpathgivenourtargetusercommunityandtheirusecasesforthe initialdeployment. Butyoustill forceuserstochoseandrememberapassword
“Getsridofthepasswordcompletely”wonthedayforus
![Page 17: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/17.jpg)
©2015MedImpact,Inc.Allrightsreserved.
DeviceKnowsYou,WebsiteKnowsYourDevice
AccessWebsite1
SwipesFingerprint3
FIDOAuthenticationRequest Sentto
Laptop
2
![Page 18: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/18.jpg)
©2015MedImpact,Inc.Allrightsreserved.
DeviceKnowsYou,WebsiteKnowsYourDevice
AccessGranted
5
Cryptographicallysignedmessage
confirmsuserbacktowebsite
4
![Page 19: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/19.jpg)
©2015MedImpact,Inc.Allrightsreserved.
LongTermVision:WorkswithPhoneToo
AccessWebsite1
SwipesFingerprint3
FIDOAuthenticationRequest Sentto
Phone
2
![Page 20: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/20.jpg)
©2015MedImpact,Inc.Allrightsreserved.
Challenges/DiscussionPoints
• Prioritization:gettingthebusinesstoagreetoallocatedevelopmentcyclestoaddingFIDOsupportrequireseducation,internalandexternalmarketing,evangelismandhigh-levelexecutivesponsorship
• FallbackSolution:whatdousersdoiftheyneedtologinanddon’thavetheirlaptop(orinthefuture,phone)withthefingerprintreader?
• Messaging:howdoyouexplainthistouserswhoarenotlikelytogoreadwww.fidoalliance.organdrealizewhatagreatsolutionthisis?DoyoucallattentiontotheFIDObrand?Howdoyouovercomefearslike“Icanresetapasswordifit’sstolenfromyourserver,butIcan’tresetmyfingerprint!”
• Client-SideObstacles:Lackofbuilt-insupportforFIDOclientatOSlevelmeansusersneedinstall/configureaFIDOclientfortheirbrowser(FIDO2.0IbelieveaimstosolvethisandalreadyWin10hasbuilt-insupport)
• Support:RollingoutFIDOsuccessfullyrequireseducatingtheentireITsupportteam,fromfront-linecallcenterstafftoLevel2and3engineers.
![Page 21: UAF Case Study by MedImpact](https://reader030.vdocument.in/reader030/viewer/2022021421/58ecddcf1a28ab9f2e8b46c1/html5/thumbnails/21.jpg)
©2014MedImpact,Inc.Allrightsreserved.
Questions