# Presentation: 157134

## E-222 Working Group Meeting DEA CSOS Pilot Discussion

**March 18, 2002**

## Agenda

**Phase I:  Status**
**Phase I:  Lessons Learned**
**Phase II: Goals**
**Phase II:  Participant Requirements**
**Phase III: Planning Ahead**
**Questions... **

## Phase I: Status

**21 registered participants in Phase I**
**8 digital certificates have been issued**
**6 completed test plans have been received (30% return rate to-date):**
**Mutual Drug**
**McKesson Corp.**
**McQueary Bros. Drug Company**
**Baxter Healthcare Corp.**
**Mallinckrodt Pharmaceuticals**
**Purdue Pharmacies LP**

## Phase I: Lessons Learned

**Manual easily retrieved and read – noting some recommended changes!**
**A couple of screen shots need to be updated in the manual.**
**No problems with certificate download times or errors.  Total test time is averaging about **_**45 minutes.**_
**Statistics will be compiled and made available once all test plans have been received.**
**So far so good!!!!**

## Registration Time Breakdown

## Browser Compatibility

## Phase I Timeline

## Phase II: Goals   

**Test forms validation process **
**Select registered location/POA – begin thinking about who you will select**
**Download forms**
**Notarization **
**Validate submission and adjudication process**

## Phase II Timeline   

## Phase II: Participant Requirements   

**Tester must be affiliated with actual DEA registered location**
**Forms must be properly notarized**

## Phase III: Planning Ahead  

** ****Identify those participants who are willing and able to commit the resources (time and infrastructure) **
**Transaction sets should be finalized**
**Workflows should be baselined**

## Phase III Target Scope – Key Areas

**Order signing**
**Order verification**
**Record retention (signed order, linked data, digital certificate)**

## Phase III Part A) Signing 

**Order Signing**
**Identification of “to-be-signed” data**
**Activation of private key**
**Signature generation (supported algorithms)**
**Success Factors/Evaluation Criteria**
**Data format & technical compatibility****—****signing approach**
**Compatibility with current/planned workflow**
**Scalability (bulk orders, certificate management)**
**Performance**
**FIPS compliance**

## Phase III Part B) – Verification

**Order Verification/Processing**
**Parsing of digital certificate [address, schedules]**
**Certificate Revocation List (CRL) access/processing**
**Order validation [integrity check, CRL check, certificate expiry check, date of order]**
**Success Factors/Evaluation Criteria**
**Verification logic**
**Compatibility with current/planned workflow**
**Archival compliance**
**Connectivity- support for LDAP through org. firewall**
**Performance (Internet-based**
**FIPS compliance**

## Phase III Part C) – Record Retention

**Record Retention**
**Signed data [Order content]**
**Certificate data [Linked certificate or attached certificate?, address from certificate]**
**Linked data [distribution center(s), fill information, receipt information]**
**Success Factors/Evaluation Criteria**
**Readily retrievable**
**Integrity maintenance**

## Phase III Logistics

**How can the group divide and conquer? **
**... ****or, can Pilot participation be tailored to the partner’s business category (Pharmacy, Distributor, Manufacturer)**
**Order Signing****—****Pharmacies, Distributors**
**Order Verification ****—Distributors, manufacturers**
**Can simplifications be made that ease Pilot development without eliminating lessons learned?**
**Order generation (existing system vs. word processor)**
**Order transport (existing system vs. FTP Vs. email)**
**Will software need to be developed?**
**If so, how can the development be shared?**
**If so, can a single toolkit be used?**

## Phase III Immediate Next Steps

**Solidify Phase III Approach**
**Identify teams (signing, verifying)**
**Identify order format (EDI 850)**
**Identify signature approach (inside/outside)**
**Identify signing toolkit (EDI, Toolkit, other)**
**Estimate critical path milestones**
**ID estimated time to complete future workflows**
**ID estimated time to complete EDI 850**
**Begin exploring tech areas******** ID skill requirements**
**Develop more detailed Phase III project plan**

## Questions