Card Tech SecurTech 96

1
(No Transcript)
2
VA Express Technical Overview

• Daniel L. Maloney
• Director, Technology Innovations
• Department of Veterans Affairs
• Silver Spring, MD., U.S.A.
• daniel.maloney_at_med.va.gov
• http//www.va.gov/
• http//www.va.gov/card/

3
Functions

• The Card works with the Network
• Visual Identification (improving veteran privacy)
• Portable data carriers pointer to additional
  data
• Electronic identification (keys certificates)
• Electronic Embossing / Form Filler
• Card Issuance and the Card Management Directory
• Card Description

4
Portable Data Carrier

• Is enhanced with a color photo.
• Has a magnetic strip on the back of the card
  containing the same information as the current
  Veterans Information Card. This allows veterans
  to use the VA Express Card at facilities not yet
  equipped to use the computer chip.
• Provides express veteran registration, saving
  veterans time and effort by avoiding
  time-consuming interviews at VA healthcare
  facilities.
• Allows veterans to share information across VHA
  medical centers, VBA regional offices and NCA
  cemeteries.
• Ensures that emergency medical information,
  including allergies and advanced directive
  information, will be available and accurate at
  all times.

5
Using the at a Veterans
Information Kiosk
Veterans Information Kiosks are being set up at
Milwaukee and Iron Mountain facilities in the
VISN 12 area. They allow veterans to review their
personal information and learn about their
available VA benefits. Prior to appointments,
veterans can review card information and quickly
identify necessary corrections, which will
improve data quality.
6
The Kiosk
The kiosk is a touch screen computer that is
located at several VA facilities. The Kiosk
provides the veteran with a means to view card
information and benefit entitlement.
The kiosk also is the gateway for the veterans to
get an ACES certificate
7
Electronic Embossing / Form Filler

• Data from the computer chip is read and placed
  into forms that are commonly used in the medical
  center, or sent outside of the medical center,
  saving staff time.
• A commercial form development tool is available
  to create additional forms
• User checks boxes for the forms they want
  printed. The data is copied from the card into
  the proper fields on all forms. All forms are
  automatically printed for the user.

8
Enabled for PKI Certificates

• Will allow veterans to conduct business with the
  VA through the Internet from VA Kiosk
• Digital signing will allow veterans to legally
  identify themselves without a hand-written
  signature.
• A password was mailed to veterans soon after they
  received their VA Express Card. The password will
  be used at a kiosk to request a digital
  certificate
• Will enable veterans to access interactive VA web
  sites, complete electronic forms, digitally sign
  and submit them, when and where it is most
  convenient for veterans.
• VA and our contractors are working with GSA ACES
  vendors to enable this capability

9
ACES Certificate Application Flow
10
Card Management Data Base

• For a patient without a card, patient data is
  pulled from the local VistA system to populate
  the chip card, eliminating data entry errors and
  retyping labor
• Key information for the veteran and each card
  issued is stored in a central directory
• Card issuance work station can retrieve
  information such as pictures from directory for
  re-issuance
• Generic Web Browser interface available for
  appropriate user access from locations other than
  card issuing station
• Data privacy protected using standard agency
  network authentication process
• Directory is Windows 2000 Active Directory using
  LDAP

11
What Information is on the
?

• On the front of the card is a color photo, bar
  coded SSN, name and patient ID (first letter of
  last name and last 4 digits of SSN).
• The computer chip stores personal, military
  service, contact, insurance, eligibility,
  employer, and emergency medical information.
• The computer chip also stores the digital
  certificate once veterans obtain it.

12
What Information is on the
?

• On the back of the card is a magnetic strip,
  which is the same as the current Veteran
  Information Card. It contains Name, SSN, Date of
  Birth, Veteran Status, and Service Connection.
• The back of the VA Express Card also has an
  address and instructions on how to return a lost
  card if it is found.
• There is also a signature panel on the back of
  the card.

13
Card Data

• A PIN protects the information on their VA
  Express Card. A PIN was mailed to veterans soon
  after they received their VA Express Card.
• If a veterans VA Express Card is lost or stolen,
  no one can use it without the veterans PIN.
• The veterans PIN is stored on the VA Express
  Cards computer chip and is not sent over the
  Internet or stored in any computer database where
  it could be compromised.
• Once veterans obtain their digital certificate,
  it will uniquely identify them when they log onto
  VA Web sites on the Internet.
• Information stored on the VA Express Card cannot
  be accessed or read by unauthorized persons.
• Using a G-8 compatible viewer with the veterans
  PIN input, key administrative and emergency data
  will be available at non VA facilities.

14
Card Technical Specification

• 32K Microprocessor card with PKI coprocessor
• T-0/1 dual mode card
• Starcos 2.3 operating system with VA upgrades
  from GD
• Low coercivity magnetic stripe for backward
  compatibility
• 3x9 bar code
• 1 inch by 1 inch color photograph
• ASN.1 structure for VA, GSA and G-8 compatible
  data structures.
• Capable of supporting 2 PKI key sets