Physician Identity Proofing for Electronic of Prescription of Controlled SubstancesVerify physician identity and medical provider status for EPCS using ID.me’s identity proofing platform.

Empower physicians with NIST-compliant online credentials and seamlessly meet EPCS requirements.

WHY EHR SYSTEMS AND HOSPITAL SYSTEMS VERIFY PHYSICIAN IDENTITY WITH ID.ME

NIST 800-63-3 CERTIFIED Meet IAL2 / AAL2 identity proofing and authentication standards to comply with DEA, HHS, and state-level requirements.

ONLINE, IN-PERSON, AND SUPERVISED REMOTE Physicians can verify identity and medical provider status Online, In-Person, or Supervised Remote. In-person proofing is done by trained administrative staff via the ID.me Trusted Referee mobile app. Supervised Remote is done via video conference with trained ID.me Trusted Referees.

INTEROPERABLE LOGIN Once a user has verified their identity with ID.me, that user will never have to re-verify their identity again across any organization where ID.me is integrated.

In an effort to mitigate the opioid crisis, the Drug Enforcement Administration mandated a NIST 800-63 certified identity proofing and authentication process for physicians issuing prescriptions of controlled substances online.

ID.me, a digital identity platform, provides seamless identity verification for physicians and healthcare providers to meet EPCS requirements. It is the first credential service provider in the United States to become NIST-800-63-3 certified, and it already services more than 200 organizations including healthcare systems, government agencies, financial institutions, and nonprofits.

www.ID.me Copyright © 2018 ID.me, Inc.

www.ID.me Copyright © 2018 ID.me, Inc.

HOW IT WORKS

1 2 3Physicians create an ID.me account, which they’ll use going forward to log in and prescribe EPCS.

Physicians’ accounts are protected from takeover with two-factor authentication:

• Enhanced SMS• Phone call to

landline• Biometrics via

ID.me app• Security key• Code Generator

Physicians verify identity by taking a photo of their driver’s license, state ID, or passport, as well as a quick selfie.

4Data extracted from the ID document pre-fills form. Physicians confirm data and add SSN.

5Physicians input information such as DEA and NPI numbers to verify medical provider status.

ONLINE, IN-PERSON, AND SUPERVISED REMOTE

With ID.me, physicians can verify identity and medical provider status Online, In-Person, or Supervised Remote

1. ONLINE. Physicians set up two-factor authentication and verify their identities online

2. IN-PERSON WITH A TRUSTED REFEREE. Organizations can designate trustworthy individuals in specific roles as Trusted Referees. They will be trained and provided with ID.me Trusted Referee Mobile App to complete the identity proofing process in person.

3. SUPERVISED REMOTE VIA VIDEO CONFERENCE WITH ID.ME. Physicians can schedule a video chat session with an ID.me Trusted Referee, who will facilitate the identity proofing process via video chat.

1 Online

In-Person with Trusted Referee

Supervised Remote with Trusted Referee

3

2

www.ID.me Copyright © 2018 ID.me, Inc.

What information is required for verification?Users verifying as medical professionals must submit the following information:

� First and Last Name

� Birthdate

� Social security number

� Mobile phone number

� Home Address

� DEA number

� DEA schedule

� NPI number

� Primary medical specialty

� State license number

� Issuing state

� State license expiration date

� 2 Primary documents or 1 Primary and 2 Secondary documents

Primary documents• US or Canadian driver’s license• U.S. Passport or passport card• Federal or state ID• Permanent resident card (I-511)

• Military ID• Foreign passport with I-551• Employment authorization

card (I-766)

Secondary documents• Credit card• Health insurance card• Social security card• U.S. birth certificate

• School ID with photo• Voter registration card• DD214—U.S. DoD certificate

of discharge or release

PROTECTING PHYSICIAN DATA

ID.me provides the strongest online identity verification technology available to prevent fraud and identity theft. ID.me’s information security safeguards are consistent with Federal and State Laws and industry best practices to protect the confidentiality, integrity, and availability of consumer information.

Ģ SAID PLAINLY, ID.ME USES BANK-GRADE ENCRYPTION TO KEEP PERSONAL INFORMATION SAFE.

ID.me is certified by Kantara Initiative as a full Credential Service Provider conformant to NIST 800-63-3 IAL2 / AAL2 digital identity guidelines. ID.me’s platform has also achieved FIDO 1.1 U2F compliance and FedRAMP Ready status and is listed on the FedRAMP.gov site. ID.me undergoes annual independent audits by Kantara Identity Framework, partner banks, GSA, and third-party security firms.

www.ID.me Copyright © 2018 ID.me, Inc.