Secure access protection – user authentication in healthcare

Smart card PKI logon and Single Sign-on solutions for healthcare
Highlights and unique features

Extremely important components of an access protection solution in hospitals are a well matched smart card life-cycle management system, superb smart card logon products for the secure primary authentication of a user session and also an intelligent Single Sign-on system that supports in an optimal way the time-critical processes of hospital staff.

More security for protecting patients and their data, practicability, efficiency and a noticeable time advantage for all logon and logoff processes and role changes between doctors and nursing staff characterise the SEFIROT solutions.

Smart card support for „role change In context“, service releases and operating theatre rosters

As until today the technical barriers seemed too high for smart card support for the following processes nobody could really imagine it: authorisation and confirmation processes with role changing between doctors and nursing staff in one and the same Citrix session; user changeover in contexts resulting from the various process control functions of a hospital information system.

SEFIROT has shown that smart card support is possible for these processes and not only that. Role changing with smart card support is a permanent component of the Single Sign-on solution for healthcare. Role changing by means of smart cards has speeded up considerably workflows in hospital that until today were hindered by irritatingly long logon and logoff times. The solution can be integrated without disruption in the process control components of the hospital information systems and yields the desired time advantage by immediate presence and availability of the applications and processes required by hospital staff in order to concentrate on their day-to-day duties. The hospital staff is relieved of system operating tasks and gains time for improving patient care.

Session roaming, prompt logon and an even more rapid reconnection after authentication using smart card and PIN

The rapid workplace change, with immediate disconnection after card removal and then taking the user session to another place in the hospital as well as short smart card logon and reconnect times are indispensable for the efficiency of doctors and nursing staff in every hospital. We have perfected these processes in our smart card logon solutions.
Every time there is a new product or release of Microsoft® or Citrix® we get down to work and bring to bear as much intelligent input as technically possible for ensuring efficiency and rapidity in the logon processes with smart card and PIN. That's our promise to you.

Passive change of password

In implementation phases, i.e. the initial rollout phases, when some departments of a university hospital are using our smart card authentication solutions – but this is not yet the case with other departments, users with or without smart card support can carry out transparently an SSO change of password, without the system being adversely affected by the fact that its users can change over between smart card logon and the traditional soft logon.

Wide support of various client systems

Hospitals and clinics have IT landscapes which have been developed over some time and are as a result heterogeneous. We take account of this – harmoniously and for a range of platforms – in our product design with a wide support of various client systems.

Using uniform concepts like Session Roaming Client for Citrix XenApp™ solutions, SEFIROT is specialised in integrating for several platforms various client systems like IGEL Linux, openthin- client and Windows 7 / 8 – and all this with almost the same look & feel and handling.

Your multi-functional ID for optimal workflows in the hospital

There is no doubt that when implementing a smart card PKI logon solution – a powerful multi-factor authentication solution – in hospitals and clinics we account for all topics which can be covered by a smart card fitted with a contact chip and contactless technology (RFID).

Instead of having to lug a set of cards around, it's much better to use a single multi-functional smart card.

If so desired, we can construct a smart card in such a way, that apart from the crypto contact chip any RFID components required by the client (Mifare, Legic, Hitag, and others) are integrated in the card.

Apart from the powerful authentication at the workplace computer the cards can be used for cashless payments in the canteen, for opening cabinets and doors, for logging on for time recording, and for other applications.

We add and code the RFID components either in advance or hand over to our customers the coding units and plug-ins for the card management system, so that the smart cards can be personalised at the customer's premises.

A printer and coding machine is also necessary to enable the optical, contact-based and contactless personalising of the smart cards to be carried out in the hospital.