Current News
Back to Current News
 
 

 

Protecting sensitive patient information online

 
April 2004
 

By Linda Hetcher, Vice President Professional Services, Concurrent Technologies

The Internet makes transmitting and retrieving information easier than ever. Dental offices can use the Internet to submit claims electronically, and find details about their patients’ dental benefits and claims history with a few clicks of a mouse.

But how secure is your patients’ protected health information as it travels over the Internet? This article explains how information is kept safe from unauthorized eyes and maintains compliance with the Health Insurance Portability and Accountability Act’s (HIPAA’s) privacy rules while using the Internet.

Technology is available today to not only protect patients’ private information, but also helps dental offices protect their own information. For example, this technology is used in secure online purchasing. Knowledge of this technology can help dental offices bolster patient trust by being able to explain how they protect patient information online. It also helps dental offices operate more efficiently, since they feel more confident using technology, and its time- and cost-saving solutions, to its fullest.

How Delta Dental protects information

Delta Dental registered its Web site through a certifying authority (CA). A CA is a third-party company that confirms the identity of a business and supports the secure transfer of data over the Internet. Delta Dental uses VeriSign, but there are other CAs as well. The popular auction site eBay uses Trust.e. However, all CAs operate similarly.

Just below the left navigation bar on Delta Dental’s home page (at www.deltadentalnj.com) is a yellow rectangular box that reads, “Web identity verified by VeriSign.” Clicking on this box displays a pop-up screen from VeriSign, which provides information about the identity of the Delta Dental Web site, including the URL or domain name of the site, company name, and dates of validity of the certificate. Certificates can be purchased for one- or two-year periods.

The pop-up screen also indicates that Delta Dental has an SSL (secure socket layer) certificate. The SSL certificate is an electronic file for Delta Dental’s Web server. It is an electronic credential that assures users that its transactions are done in a secure way.

A business’ SSL certificate is a bit like the passport a traveler presents to authorities. The SSL certificate and passport both validate identities.


What SSL certificates mean to Web site users

The SSL certificate ensures three things:
• Authentication. It says that the organization that owns the Web site is a legal entity and that it has the right to use the domain name. (In Delta Dental’s case, the domain name is www.deltadentalnj.com.) It ensures that Web site operators are who they say they are.
• Privacy. Data exchanged between the user and the site is encrypted, or made unreadable, until it arrives at its destination.
• Integrity. Information carried between the user’s desktop and a Web site such as Delta Dental’s can’t be tampered with. What is sent is what is received.

Secure areas of Web sites

Certain areas of some Web sites are secure. For example, Delta Dental’s Benefits Connection area is one such area. Only transactions that take place in secure areas of Web sites are truly private. While e-mail is not necessarily protected over the Internet, information sent to Delta Dental’s Customer Service Department using the Contact Customer Service Form through Benefits Connection (which resides in a secure area of the Web site) is secure.

How do you know if you’re in a secure area of a Web site?

Check the URL or site address. It will begin with https rather than http when in a secure area. In most cases, you must provide an ID and password to access applications and private data through a secure area.

When in a secure area, the right hand side of the bottom toolbar will have a lock icon. Clicking on the lock provides information about the SSL certificate.

SSLs certificates make secure Internet transactions possible

Internet users want to be assured that the Web sites they visit are legitimate, and that those sites take the proper steps to protect privacy. When you navigate the seemingly faceless ‘Net, SSLs provide third-party verification that you’re communicating with who you think you’re communicating with, and that any information exchanged will travel securely. SSLs are an important component to making Internet transactions secure.


Concurrent Technologies designs and develops custom Web-based interactive solutions for a diverse clientele ranging from Fortune 500 companies to non-profit organizations. In the business for over 18 years, Concurrent Technologies is a total solution provider (TSP) offering a range of services from e-business strategy to complete technology outsourcing. For more information, visit them at www.concurrenttechnologies.com or call (800) 345-3895.

 
   
  Additional resources
   
 
  Click here to download this article in PDF format