Jetmobile

VZP Uses SecureJet to Protect Client Personal Information

Vseobecn Zdravotna poistovna (VZP) is the largest health insurance company in Slovakia. Today, the company insures approximately 65% of the Slovak population and stores medical records of its clients in its IT systems. At the same time, the company operates the broadest network of regional offices providing services to clients in 87 locations throughout Slovakia.

Nowadays, it would be impossible to seamlessly process the data generated by such high number of clients without using state-of-the-art information technology systems, especially in the healthcare arena which represents a critical sector.

That is why Vseobecn Zdravotna poistovna recently made a decision to build with SecureJet a new Comprehensive Information System that would answer the most demanding challenges relating to the operation of a healthcare insurer of such an important size.

1. Finding a solution
One of the vital requirements of all health insurers is to secure printing of documents so that no unauthorized persons are able to gain access to such documents. Medical records contain information about health conditions and other highly sensitive personal client information. This information must be protected by insurance companies against possible misuse, not only because that is what the legislation requires, but also with regard to ethical reasons. The trust of clients and patients is the highest imperative in this field.

Until recently, it was impossible to secure systems that used network printers located outside of offices (mostly in corridors, due to accessibility reasons) to prevent the access to printed documents by unauthorized persons. Inevitably, there was a certain time period between the moment of executing the print job and the moment of retrieving the printed documents from the printer. How large this time interval was, depended on how accessible the particular printer was. During this interval, not only could someone read the document, but in extreme cases, they could even steal the documents themselves. These security breaches had to be prevented.

"We've been contemplating this task for some time, says Tibor Tark, Project Manager, Comprehensive Information System, VZP. We calculated how many printers we in fact needed and then we looked for a method that would secure a situation in which users would not be able to print anything they wanted. At the same time, we required that everything these users actually printed was recorded, i.e,. a system that could not be fooled. We found this system with HP, who recommended the SecureJet product for our new printers and whose product fully met our requirements."

2. SecureJet, the right solution

How does our secure printing solution work? SecureJet represents in fact the extension of network printers that contains the so-called "PIN terminal" and the respective software. Our solution is built on a principle which requires storing all print tasks on the print server before any printing takes place. The entire system is managed and controlled by a network administrator who assigns specific PIN codes (or chip cards, provided that the respective printers are fitted with card readers) enabling access to print jobs to all users who wish to print secured documents.

The employees generate their print jobs on any of the network printers. However, the print job information does not travel to the selected printer but, rather, it is stored on a print server. Later, an employee may approach a printer at any time (although this time period may be limited so that the printer is not overloaded by an excessive number of print tasks) and enter his/her pin code using the terminal's keyboard. Upon successful validation of a user ID, the chosen network printer downloads the respective print task from the print server and prints the document in question.
A very important fact with regard to security of printed documents is that printers print such documents only when the employees who generated the respective print tasks are present near the printer. Additionally, print tasks may be stored in the print server for a specified time period so that it is possible to search back in time and to identify who printed each document. Whereas Vseobecn Zdravotna poistovna (VZP) operates 83 access points in its Slovak network, a given print task may be downloaded from the print server equipped with SecureJet Print-PS (there are 38 servers equipped with SecureJet Print-PS) and printed at any of these locations after a user is successfully authenticated.

"Within the framework of building our Comprehensive Information System, we purchased 330 HP printers. The delivery comprised various models of LaserJet network printers, including the latest 9000dn series. In total, 149 printers were fitted with SecureJet security terminals" says Tark. "I am glad that it was Hewlett- Packard Slovakia s.r.o. that succeeded in the tender, especially as this company did not offer us just printers but rather a comprehensive security solution". He continues in explaining his good feeling about the transaction: "It looks like HP still has the best printers in the world and the largest market share. Another big advantage for us was the fact that the servicing and support would be secured by such a solidly established company"

3. Customers require consistent solutions

To summarize the features used for a secure printing solution:

• protection against documents being stolen from the printer
• printing of documents is possible on any network printer equipped with SecureJet; it is only after sending the respective print task to the system that a user decides at which printer the document will be downloaded from the print server
• ability to record and identify users and secured documents printed by them
• monitoring of the number of copies printed by individual users, with the opportunity to limit this number
• broad range of user identification methods: PIN codes, smart cards, corporate magnetic or proximity badges, and biometric methods.

"We must understand that a printer is no longer a dumb tool but a smart device just like a PC. It features its own processor, memory, control panel...  all this enables us to create new exciting solutions",  says Vladimír Páleník, IPG Commercial Sales Manager, Hewlett-Packard Slovakia s.r.o.. "This is also why customer requirements these days are not limited just to delivery of printers. More frequently customers ask for consistent solutions and HP is able to tailor these solutions to their needs, as it happened in case of the secure printing solution for VZP. Tibor Tarabek adds: "I am convinced that our investment was a good one. Our clients may rest assured that the personal information is well protected and shall not fall into the hands of unauthorized individuals."

Implementation Project of I/O Devices for the Comprehensive Information System for VZP

Requirements: Printing (exporting) of outputs from CIS system may be performed only by authorized users. The printed output may be retrieved only by the owner of the given printed output, providing confidentiality of the printed output.