Health ID Citizen Use Case

From IdCommons

This script is written from the first person point of view, read "I", as "Internet User"

I decide to get create a record for my health, using [Google, Microsoft, Polka, Kaiser, UnitedHealthCare, WebMD, ad infinitum, please add]. When I logon, it tells me I can have participate in the Health Trust, a set of hardened, yet connected technologies that support my single logon on the web, as well as a private, yet portable health record. It explains that the Health ID Trust.

I choose to logon and try it out. It asks me for my OpenID (if I have one). I enter it, it thinks for a moment, then it tells me that my endpoint is

- Valid and provider supports Open ID to get started (requires validation by email or phone)

- Valid and provider supports Health ID Trust to get started and supports Health ID Trust (and for which portal suppliers and applications)

- Valid and provider does not support Health ID Trust

It informs me that now that I've got my OpenID setup, it has setup a base package for me, and includes default options. I choose to do it, if I read it more closely, it says that it's setup these items.

- CCR (a portable record, and the common fields supported)

- Portable Contacts + FOAF + XFN (pull in your address from your social network)

- Emergency Information (new standards to add your emergency contact and make sure it's updated if this person changes their number)

- ID provider of my choice so I have an Internet endpoint represents me in transactions on the web

- Certificate for my browser to accept assertions from my providers when needed, so I can pass through sites without always starting new

- Health Information Card that allows me to stop inputing logon/password/signup forms, I start with a base Anonymous Health Card that verifies the Country of Location I am from. This card will also be my primary for my doctor. There are templates for more, including Health card.

- Social network bridge (allow me to assert base info at MySpace, OpenSocial, FaceBook, Twitter, +++) and have that information and group of friends available to My Health portal

- Email address (for persistance of communications) that I can be reached at for information on my account and profile. Optionally, support a cell phone, SMS, or other...

It allows me to set a profile for my account, including my Name and other Contact information that isn't imported in.


Then, it asks me if I want to have the system grab my known medical records. I choose yes.

It looks at my account to check if there is enough validation of my state to allow me to grab the records electronically.

It notices that in my OpenID, I have setup my phone number to be called. It asks me to use this as my authorization mechanism for access. I say yes. The system checks to see if the phone is attached to my name and record. It validates it and dials the number. It asks me to validate my SSN on the keypad, and say my name. I do. It processes the information and says that I've been validated. It asks me if I want to use this continue requiring phone call for record access, or to allow my phone to set a key, and a pin on my phone.

I started by bringing in my records, it asks, what country I'm from, and my national identifier. I put in U.S. and my SSN. It verifies that it's correct and validates this info to my record.

It asks me if I'm in the X Family, and whether I want to attach my record, for purposes of communication. It sets up.

Then, it then brings back the list of records it has for me, from places it things I've lived or gone to the hospital. Where it needs help, it asks.

It asks me if I want to grab a record from any hospitals, doctors, or cities.

- I choose cities

- I choose doctors

- I choose hospitals

It asks me if I want to request any of my own information and associate it with the hospitals or doctors I've selected, and that it will send a request on my behalf if I have an email or and address.

It has the ability for me to set up a personal whitelist, I can select others to get information and records over the different providers I select. I chose to do it for my doctor, and my emergency contact information.

It also tells me that I can setup my whole family, creating new packages for them, as well as a Family ID. I choose to do it. It creates the necessary sharing records and legal bindings within members.

The system lets me know that it can publish key parts of my emergency information into a public registry. It binds emergency relationships to me and puts them as part of the discoverable portion of my profile.


Key data is updated to my identity provider, as my endpoint.


Then, the portal I've selected allows me to to manage all of my information in either a portal (get started with lead players), or by taking the files and managing them on my own. Additional services are offered by portals, some of these functions will also be discoverable on the person's identity, depending on what the person has granted.

- Fax inbox (also goes in my profile, shared selectively)

- Virtual meetings (also goes in my profile, shared selectively)

- Video sharing (also goes in my profile, shared selectively)

- Paper docs (also goes in my profile, shared selectively)

- Partner applications

- Anonymous (pseudonym) sharing

It let's me choose how to share it and how my applications interact with my records, including sharing them with others. It then allows me to manage and share parts of my medical record, by typing it in, adding files, or and if I want to start sharing it.

- To get my record integrated (level 2), enter in your PHR, or EHR site password (this will also start the process of populating your record)

- To get another hospital to accept your records, enter in a phone number your doctor can be reached

- To get your hospital to allow doctor to comment directly to your portal, visit them in person, or bring in signature authority, and your iPhone at next visit.