multi-factor authentication



TriCipher Solutions: Healthcare

Healthcare organizations are moving patient records online to lower the costs of maintaining paper-based records and provide easy access to healthcare providers. However, moving patient records online exposes them to the emerging threat of medical identity theft or other improper user of patient medical information. In accordance with the Health Insurance Portability and Accountability Act (HIPAA), government regulators have issue security guidance to secure electronic protected healthcare information (EPHI) that recommends implementing two factor authentication to access systems containing EPHI and strong encryption of EPHI when it is stored. Everyone, including customers, online businesses, and government regulators recognize the immediate need to move beyond passwords to an easy to use, secure, and low cost system that will prevent unauthorized access and identity theft.

"Medical identity theft in which fraudsters impersonate unsuspecting individuals to get costly care they couldn't otherwise afford is growing... And this isn't petty larceny. Experts note that while individuals who have had their credit-card data stolen are usually wrangling with their banks over losses of as little as a few thousand dollars, medical ID theft can leave victims, and the doctors and hospitals that provided the care, staring at bills that are exponentially higher."

Diagnosis: Identity Theft, Business Week, January 8th, 2007


The existing options for establishing online identities such as passwords, cookies, pictures, and tokens have been proven inadequate by fraudsters, while stronger forms of authentication such as traditional PKI, Smart Cards, and Biometrics have failed to realize their potential because they are difficult to use and deploy, and simply cost too much to make business sense.

The TriCipher Armored Credential System (TACS) is the only unified authentication infrastructure that can provide a secure, easy to use and low cost authentication system for to access online health records and the encryption keys used to encrypt stored EPHI data. TACS provides more effective security than traditional PKI, is as easy to use as entering a username/password and has a low cost per user and transaction. The TriCipher patented multi-part credential provides unparalleled protection of a user’s online identity while maintaining the familiar user experience of entering a username and password. With the secure multi-part credential as the foundation, TriCipher’s Authentication Ladder™ integrates a range of authentication factors including passwords, browser cookies/certificates, PCs, portable devices, tokens, smart cards and biometrics to provide a complete authentication system.


Copyright © 2008, TriCipher, Inc.
TriCipher, Armored Credential, and Armored Credential System are either registered trademarks or trademarks of TriCipher, Inc. in the United States and/or other countries. All other trademarks are the property of their respective owners. FIPS 140-2 Validation is a Certification Mark of NIST, which does not imply product endorsement by NIST, the U.S. or Canadian Governments. Identrust, Identrust Compliant, and the Identrust Compliant logo are trademarks and service marks of Identrus LLC.