eperi encrypts digital identities of health insurance policyholders in the cloud

Pfungstadt, August 1, 2024 - The collaboration between encryption specialist eperi and a well-known verification provider enables millions of health insurance policyholders from several statutory health insurance companies to access their personal insurance data and electronic patient records securely and easily. With two-factor authentication, policyholders can log in to the insurance company's digital portal via the health insurance app and access their data. With the support of eperi, the verification platform can protect policyholder data and other data without additional effort. The solution developed for this purpose, which is based on eperi encryption technology, ensures that the data is secure at all times and complies with the particularly strict data protection requirements in the healthcare environment.

As the digitalization of the economy progresses, the need to protect digital data and identities is increasing. This applies in particular to ID apps, for example those used by health insurance companies. These must meet high security standards, not least because they fall under the KRITIS guidelines, which place even higher demands on data security and data protection. For this reason, a recognized provider of solutions for digital identity verification relies on encryption from eperi. As the operator of a single sign-on platform, the verification company gives its customers and their users unrestricted control over their electronic identity - whether for logging into the respective health insurance app, for online transactions or other processes that require digital identification. To ensure the best possible data protection, eperi ensures that there is an individual key for each user data record.

The management of the cryptographic keys, the connection to hardware security modules and the regular updating of the individual keys were implemented together. When developing the specific solution for the encryption and tokenization of personal data using a unique user key, various special features had to be taken into account:

1. Compliance with regulatory requirements
2. Encryption of identity attributes and transaction data
3. Integration into existing security systems

This customized product, which eperi has developed based on its proven encryption technology, ensures that the verification provider's processes are compliant. Thanks to encryption, the verification provider fulfills the criteria of electronic identification regulations, trust services of the European Telecommunications Standards Institute and the guidelines of the Digital Medicine Agency.

Thanks to the eperi solution, the verification provider can fulfill all criteria of industry-relevant regulations and directives efficiently and cost-effectively, without the additional expense of in-house developments. Successful certification and approval in accordance with the compliance requirements was achieved.