• Topic ID: id_11038885
  • Version: 3.0
  • Date: Mar 6, 2020 9:58:02 PM

HIPAA Configuration

1 Configure User’s HIPAA System Access

Notice Image
  • notice
  • The HIPAA has been disabled when the software was loaded on this system. Do not turn it on without the consent of your customer. Perform the following steps ONLY IF the customer has specifically requested for it to be enabled. Consult the Pre-installation questionnaire that the customer has filled out to perform this procedure

When HIPPA is configured, the Shutdown icon popup will contain the Logout User selection.

The list of users who will have access to the system must be added before that person can gain access to the system. Configuration of these users may be added by any user that has admin permission. The service or admin users are both able to add users. The admin users will typically be assigned by the customer administration and will add accounts for the system.

In order to add users, you will need to access the admin screen with Applications software up. To do this:

  1. If HIPAA Present was set to Off during the Load process: Select the Common Service Desktop, Utilities, Application Shutdown. Open a Unix Shell and become root. Type reconfig. Select Config. Select the Preferences tab. Set HIPAA Present to On. Select Accept. Select Yes for reboot. If needed, open a Unix Shell and type st. Then select OK as needed.

  2. If HIPAA Present was set to On during the Load process: With Application software up, press the pink Shutdown icon. Select Logout User and then OK.

  3. The login/admin screen appears. See the illustration below.

  4. Enter the Login ID: root.

  5. Enter the password:

    note:

    If the Password has not been modified by the site and is not known, the contact Local GE Service.

  6. Select Login. The following screen will appear (but may not contain any Users):

  7. Using the Pre-Installation HIPAA worksheet, determine how the customer wants to assign users.

    • For Local User Management continue with the next section.

      note:

      Local User Management maintains User log on account information on the system, whereas Enterprise Setup utilizes the customer's User database maintained on a separate customer server.

    • For Enterprise Users skip to the Enterprise Setup section.

    note:

    If the site configures as Enterprise, they still need to add at least one group that has Standard User permission and one user assigned to this group to be able to do Protocol Edit. If you do not do this step when in Enterprise mode, no one will be able to add or edit protocols if configured as Enterprise.

2 Configure Local User Management HIPAA System Access

Notice Image
  • notice
  • Perform either the Local User Management Section (this section) OR the Enterprise Setup Section (Enterprise Setup). Do NOT perform both.
note:

It is very important to create several different user groups. The reason is that each group will have different access permissions, which are important for securing patient privacy. Groups are assigned access permissions, not Users.

  1. Select Group and Permission Mapping tab. Create “Users” groups as follows:

    1. Select Add Group.

    2. Decide on and enter the Group name to add of the group(s) to be added.

    3. Select Add Local Group.

    4. Click on the applicable boxes to enable the group permission privileges per the Note below.

      note:

      It is recommended to create at least three (3) groups:

      1. □ Administrator: User has “Scanning”, “Edit Protocol”, and “Add User” Privileges.

      2. □ StandardUser: User has “Scanning” and “Edit Protocol” Privileges

      3. □ LimitedUser: User only has “Scanning” privileges

    5. Select Apply group settings.

    6. Click Apply now.

    7. Repeat the above steps as necessary for additional groups.

  2. Verify the Group permissions check boxes are set as expected.

  3. Select Local User Management tab. Create “Users” as follows:

    1. Select Add User.

    2. Decide on and enter the Username to be added.

    3. Type in the Password and then Confirm password. First Name and Last Name are not required entry fields.

    4. Select Submit.

    5. Repeat the above steps as necessary for each additional Username.

  4. Assign each Username to the appropriate group(s) by selecting the check boxes under each group permission heading as needed.

  5. Click Apply user settings.

  6. Click Apply now.

  7. Click Exit.

  8. The HIPAA screen is displayed. Enter one of the usernames created in the Login ID field then enter the associatedPassword.

3 Configure HIPAA System Users

note:

Once a user has been added to the list as an administrator, they have privileges to:

  • Set the number of minutes the system can be inactive before it locks the screen.

  • Set whether or not the Emergency button and username prompt will be displayed on the start up screen.

    note:

    If the Emergency prompt is not displayed, only a valid user can log on. This could result in a safety violation if the emergency patient data cannot be accessed.

  • Set up coordination with the system network.

  • Set up other user accounts

  1. Ensure that you are logged in (as described in Configure User’s HIPAA System Access) and click the box next to Enter admin screen.

  2. Click Login.

  3. Click the Configurations tab.

  4. If not displayed, select Configuration tab on second row.

    This brings up the Configuration Screen. (You may see either of two screens depending on software version.)

  5. Select the choices you wish to have selected:

    • Inactivity Timeout (minutes) - Enter the number of minutes before automatic logout will occur next to the Inactivity Timeout prompt.

      For example if you enter 10 minutes, the system will display the splash screen after 10 minutes of inactivity (no keyboard entry or mouse movements), requiring the user to log in. When logging back in, the system is returned to its last known state.

      By entering 0, the system will never logout automatically.

    • Display Emergency Button - Click the box next to the Display Emergency Button prompt. The Emergency Login button will be displayed on the splash screen.

      If this button is not displayed, only those users with a valid account can log onto the system.

    • Display Emergency Prompt - Click the box next to the Display Emergency Prompt to require emergency users to enter their name.

      If you do not turn on the Emergency button, this prompt is never displayed.

    • Cache Enterprise Users - Gives all users previously set up on the system the ability to log in, even if the site network is down.

    • Enable Enterprise Authentication and Enable Authorization - Used to verify who you are and what privileges you have, based on the network settings at your site.

  6. Click Apply Configuration.

  7. Click Apply now.

4 Enterprise Setup

Notice Image
  • notice

The Enterprise setup is used by the site’s IT (Information Technology) or GE Service personnel. It provides connectivity to the site’s user database.

note:

If the site does not have a username password server this setup cannot be used.

Things to consider:

  • Utilize the enterprise capability whenever possible.

  • Make sure the enterprise groups are granular enough to restrict protocol edit access.

  • The inactivity timeout should be turned ON.

  1. At the Login window, enter your Login ID.

  2. Enter your Password.

  3. Click the box next to Enter admin screen.

  4. Click Login.

  5. Click the Configuration tab.

  6. If not displayed, select Configuration tab on second row.

    This brings up the Configuration Screen. (You may see either of two screens depending on software version.)

  7. Select Enable Enterprise Authentication.

  8. Click the Enterprise tab.

    This displays the Enterprise screen.

  9. Enter the required Parameters.

    The Network Administrator can help with these.

  10. Click Apply Configuration.

  11. Click Apply now.

  12. Click Exit.