E-222 Working Group Meeting DEA CSOS Pilot Discussion

1
E-222 Working Group Meeting DEA CSOS Pilot
Discussion

• March 18, 2002

2
Agenda

• Phase I Status
• Phase I Lessons Learned
• Phase II Goals
• Phase II Participant Requirements
• Phase III Planning Ahead
• Questions

3
Phase I Status

• 21 registered participants in Phase I
• 8 digital certificates have been issued
• 6 completed test plans have been received (30
  return rate to-date)
• Mutual Drug
• McKesson Corp.
• McQueary Bros. Drug Company
• Baxter Healthcare Corp.
• Mallinckrodt Pharmaceuticals
• Purdue Pharmacies LP

4
Phase I Lessons Learned

• Manual easily retrieved and read noting some
  recommended changes!
• A couple of screen shots need to be updated in
  the manual.
• No problems with certificate download times or
  errors. Total test time is averaging about 45
  minutes.
• Statistics will be compiled and made available
  once all test plans have been received.
• So far so good!!!!

5
Registration Time Breakdown
6
Browser Compatibility
7
Phase I Timeline
8
Phase II Goals

• Test forms validation process
• Select registered location/POA begin thinking
  about who you will select
• Download forms
• Notarization
• Validate submission and adjudication process

9
Phase II Timeline
10
Phase II Participant Requirements

• Tester must be affiliated with actual DEA
  registered location
• Forms must be properly notarized

11
Phase III Planning Ahead

• Identify those participants who are willing and
  able to commit the resources (time and
  infrastructure)
• Transaction sets should be finalized
• Workflows should be baselined

12
Phase III Target Scope Key Areas

• Order signing
• Order verification
• Record retention (signed order, linked data,
  digital certificate)

13
Phase III Part A) Signing

• Order Signing
• Identification of to-be-signed data
• Activation of private key
• Signature generation (supported algorithms)
• Success Factors/Evaluation Criteria
• Data format technical compatibilitysigning
  approach
• Compatibility with current/planned workflow
• Scalability (bulk orders, certificate management)
• Performance
• FIPS compliance

14
Phase III Part B) Verification

• Order Verification/Processing
• Parsing of digital certificate address,
  schedules
• Certificate Revocation List (CRL)
  access/processing
• Order validation integrity check, CRL check,
  certificate expiry check, date of order
• Success Factors/Evaluation Criteria
• Verification logic
• Compatibility with current/planned workflow
• Archival compliance
• Connectivity- support for LDAP through org.
  firewall
• Performance (Internet-based
• FIPS compliance

15
Phase III Part C) Record Retention

• Record Retention
• Signed data Order content
• Certificate data Linked certificate or attached
  certificate?, address from certificate
• Linked data distribution center(s), fill
  information, receipt information
• Success Factors/Evaluation Criteria
• Readily retrievable
• Integrity maintenance

16
Phase III Logistics

• How can the group divide and conquer?
• or, can Pilot participation be tailored to the
  partners business category (Pharmacy,
  Distributor, Manufacturer)
• Order SigningPharmacies, Distributors
• Order Verification Distributors, manufacturers
• Can simplifications be made that ease Pilot
  development without eliminating lessons learned?
• Order generation (existing system vs. word
  processor)
• Order transport (existing system vs. FTP Vs.
  email)
• Will software need to be developed?
• If so, how can the development be shared?
• If so, can a single toolkit be used?

17
Phase III Immediate Next Steps

• Solidify Phase III Approach
• Identify teams (signing, verifying)
• Identify order format (EDI 850)
• Identify signature approach (inside/outside)
• Identify signing toolkit (EDI, Toolkit, other)
• Estimate critical path milestones
• ID estimated time to complete future workflows
• ID estimated time to complete EDI 850
• Begin exploring tech areas? ID skill requirements
• Develop more detailed Phase III project plan

18
Questions