Secure Healthcare Identity Verification for Patients and Providers

From patient portal identity proofing to authenticating billing and clinical staff for Payer interactions to Electronic Prescriptions for Controlled Substances, ID.me streamlines a safe and secure healthcare identity verification and authentication process.

Verified medical profile card with NPI and DEA number entry fields

2023 Electronic Prescriptions for Controlled Substances Mandates

Prepare for federal and state e-prescribing mandates:

  • Review the current landscape of EPCS mandates
  • Review what’s coming in 2023 and steps you can take to prepare
  • Recap product enhancements to ID.me’s medical credential validation

Male doctor holding a clipboard with a stethoscope

Electronic Prescriptions for Controlled Substances (EPCS)

ID.me’s Credential Service Provider enables providers, prescription applications, and Electronic Healthcare Records (EHR) organizations to rapidly comply with the DEA Rule for Electronic Prescriptions for Controlled Substances and relevant state and federal law. Find out why more than 100,000 providers leverage ID.me for EPCS.

Risk-Adaptive Identity Verification Levels

From next-gen replacements for legacy Knowledge Based Authentication to NIST Identity Assurance Level 2, ID.me provides turnkey workflows that map authentication to risk. Use ID.me’s Knowledge Based Authentication replacement policy to perform patient identity proofing while ID.me’s NIST 800-63-3 Identity Assurance Level 2 policy support workflows tied to patient direct right of access. ID.me’s Trusted Exchange Framework, and Common Agreement (TEFCA) and provider workflows are tied to e-prescriptions and billing.

IDme identity verification flowchart with allowed and rejected profiles
Users verifying their identity online, through a call center, and in person

Accessible Identity Verification for Patients and Providers

Forty-five million Americans either don’t have credit history or have a very limited presence in credit and public records. ID.me has innovated to offer new pathways for online identity verification to historically underserved communities. These capabilities are important escape hatches to save time for providers who aren’t listed accurately in records due to a name change or change of address. Find out how ID.me offers online, call center, and in-person verification services that increase access for groups like international users, people who don’t have credit history, and households that speak English as a second language.

Compliant Multi-Factor Authentication for Providers & Patients

ID.me’s Multi-Factor Authentication is certified by an independent body against NIST 800-63-3 Authenticator Assurance Level 2 as well as the DEA’s requirements for Electronic Prescriptions for Controlled Substances. Patients benefit from Multi-Factor Authentications designed for accessibility and security from FIDO WebAuthn to SMS based One Time Passcodes with additional authentication controls to mitigate known risks of SMS MFA.

IDme sign in multi-factor authentication text
Medical compliance list with circle photo of man on a call

Turnkey Regulatory Compliance

ID.me makes compliance with multiple regulatory regimes including NIST 800-63-3, FedRAMP, HIPAA, The 21st Century Cures Act and IAL2 proofing for Qualified Health Information Networks (QHINS), and the DEA rule for EPCS simple and straightforward. As a shared service ID.me already has trust marks from independent bodies that prove compliance. ID.me’s legal contracts account for the complexities of federated authentication and identity verification in the context of HIPAA to speed legal approvals tied to vendor onboarding.

Consumers Have the Right to Privacy

ID.me is committed to a future where individuals control their own data and how it is used through a digital wallet that mimics how physical wallets function. Sparked by grant funding from NIST, we have worked for a decade to create a new online status quo that is more private and secure. To us, privacy means setting the conditions for best practice when it comes to data minimization, appropriate authentication, and informed consent. Once those conditions are satisfied, the decision to share data should be up to the individual alone.

Profile photo partially obscured by blurred rectangle with lock and fingerprint icon
Woman smiling at phone with you have been verified notification

Verifying External Providers, Contractors, & Remote Employees

With verified legal identity as an anchor, ID.me’s attribute exchange taps into sources of truth to validate if an individual is an employee, contractor, or professional. This capability can be especially important for healthcare organizations that need to verify if an external user is a healthcare provider or a member of the billing department who needs access to sensitive health data. Whether ID.me is tapping into licensing data, educational institutions, or Active Directory, online identity proofing coupled with credential validation from issuing sources can save time and money while increasing security relative document based approach.

Tabula Rasa HealthCare Partners with ID.me to Transform E-Prescribing Experience and Satisfaction

Tabula Rasa Healthcare (TRHC) integrated ID.me into EireneRx, a cloud based e-prescribing and medication safety platform, for identity proofing and Multi-Factor Authentication capabilities related to e-prescribing and Electronic Prescriptions for Controlled Substances (EPCS). Find out why Tabula Rasa picked ID.me and the results of the engagement.

Tabula Rasa healthcare partnership highlights page

Learn More

See More Healthcare-Enabling Capabilities