Need for digitized prescription dispensing
The authorities' introduction of e-prescriptions necessitated a comprehensive renewal of pharmacy systems to facilitate digitized prescription dispensing. Stricter requirements were set to ensure patient security and privacy, as well as ensure that only authorized personnel have access to prescription information.
Apotek 1 needed to modernize and strengthen their technical solution and engaged Cloudworks to carry out a needs analysis. For Apotek 1, it has been important that the solution met the security requirements without compromising either the user-friendliness for the employees or the customer experience.
Strict requirements of security level for login
With the introduction of the new in store data systems, requirements were set for using the highest security level - level 4 - for login. The company's solution at the time was based on local IT infrastructure and decentralized operations in each individual pharmacy.
The analysis project worked with the hypothesis that procurement would be simplified by centralizing user management and standardizing roles. This will lead to scalability, better control and simplification of tasks related to access management and control.
Testing of solutions with simulation and role play
But how can authentication be efficient and user-friendly while meeting security requirements? In order to arrive at an appropriate authentication solution, the Lean Startup methodology* was used. This methodology is used to quickly discover whether a suggested alternative is viable.
For that purpose, a pharmacy was chosen to test various login and logout options. This was tested in practice through simulation and role-plays. Solutions such as fingerprints, application, cards and security key were tested and ranked by specific criteria.
One of the criteria was login time and that the employees through Single Sign-On should have a feeling of working within one tool, and not three. The use of an application such as BankID, would be a time consuming login process. A fingerprint reader, on the other hand, would be more rapid, but had to be excluded due to operational reliability and hygiene.
