1. Go "Web", Young Man - Lassoin' SoftWeb Plus
Presented by the NIH team: Rick Allison Bonnie Aramayo, MT(ASCP) Tony Barnes Chung-Hee Row, MT(ASCP)

2. National Institutes of Health

3. NIH “round up”

4. Hmm SWP.....Why, How? IDEA = SWP CORRAL “Outside” users
Evaluate possible use options
Non HIS Patients
Controlled, Limited Access
Ensure Database Compatibility
Customer ordering, manual Lab ordering eliminated
How to Coordinate, Implement, and Manage
Impact on LIS and current processes

5. Soft Web…a PLUS
SoftWebplus application is a web application written in Java and JavaScript
SoftWebplus client part communicates with SoftWebplus server part over the HTTP protocol
Deployment on user PC is not needed - user launches SoftWebplus web application via internet, using some specific URL, user id and user password.
All data exchanged between the client part and the server part is sent in the encrypted format through SSL (128 bits) connection.
If package of data is “stolen” by a hacker in the middle, it is safe because it still needs to be decrypted.

6. Roping SWP into the Herd
You Are Here

7. Why use IT Architecture?
Identifies the Big-Picture
Identifies which databases need to “talk”
Analyzes impacts of new systems
Identifies single points of failures
Facilitates communication
Tracks infrastructure and IT changes

8. Location, Location, Location
DLM:
Animals
Non-NIH patient
WARD:
AN, LM
DTM:
Donors
Pre-NIH patients
WARD: TM +
&
Pharmacy,
PET & Molecular Imaging,
Water Samples, Sterilizer QC, Dialysis Samples,
Epidemiology

9. SWP “Old” user roundup Process-
Animal Tech fills out a manual Ordering Record
Lab staff enters orders in SoftLab
Lab staff enters fax numbers in OE
Test results are sent through Visifax according to print scheduler
Issues-
Too much Tech time wasted
Clerical errors
Visifax problems
Fax problem on end user side
Can’t pull data into any type of database

10. SWP “New” user roundup ***Attention Animal Investigators***
The CC Department of Laboratory Medicine’s Animal Testing Ordering and Resulting process will soon be transitioning to a web based application. This application will replace the use of the current paper Ordering Record for Animal Testing and faxed result reports.
Some of the benefits of the web based application will be:
Ø  Password protected access to their data
Ø  Create unique Animal I.D.’s
Ø  Trend results
Ø  Easy result retrieval at any time
To this end, DLM will need to collect Web Registration Information in order to create an account for each PRIMARY INVESTIGATOR (P.I.) and each Billing CAN Number a P.I. may use. Only Primary Investigators will be given an account.
On the following page, please provide the requested mandatory information so that we may begin the account creation process. Information on minimum hardware requirements and application training will be provided as the roll out date approaches. The current Ordering Record for Animal Testing form and faxed results will continue to be used until you are notified.
If you have any questions, please CC-DLM LIS Help or Chung-Hee Row

11. SWP Access Control Setup
Private Locations
Location/User Settings
Favorite List

12. Branding Made Easy Minimum number of required fields
Customizable fields

13. Whipped into Shape Environment name MRN prefix Barcode extension
Shipping Manifest
Templates
Domain field empty
OE canned messages
Split/merge hosparams
Special Requests field
Species field
Private Locations
Additional Requisition field

14. Customized Ordering Screen
Order Entry screen - User/Clinic/favorite specific

15. Customized Ordering Screen
Order Requisition - with barcode

16. Customized Result Review
NO FAX
GUARANTEE

17. Reports – Result Trending
Customized results and trending results info from CHR

18. Results in Excel & PDF Formats

19. Cautionary Trail...SCR
Some Roads Lead to SCR
Species field

20. .....SCR
Tube Type extension

21. SWP Implementation Pick a pilot testing site
External customers enter orders in SWP off-site
Print order requisition or print labels
Bring samples to lab with order requisition/labels
Lab staff receives samples in SoftLab
scanning barcode on order requisition or scan labels
Run samples and verify results on the instrument
Done!
No longer send results through Visifax, , or snail mail
Happy customers for less work!! 

22. Whoa Nellie

23. APACHE...Good!!
Option selected by the NIH

24. 1st Hurdle ... Security URLs, LogIns, Passwords Internal NIH access
External NIH access
Connectivity

25. “KEY”... public key cryptography

26. Hurdles....few more
ActiveX…..control, control!

27. “Bandits” on the Horizon
Public and Private keys are mathematically related
Public key is used on client PC to encrypt data before it is sent to the server; private key is used on the server for data decryption.
A key pair – public and private is generated on the server; during this process, typically a person who generates keys is prompted to enter:
Organization Name
Organizational Unit
Country Code
State or Province
Locality
Common Name
Private Key is installed on the server. For security reason it is important that access to key file is restricted.
Certificate is purchased from Certification Authority (CA) or is “Self Signed”. In case of purchase from CA, Public Key is sent as Certificate Signing Request (CSR) to CA. CA checks included information and sends back the signed certificate. A person who generates keys signs self-signed certificate.
Certificate (Signed Public Key) is installed on the server and is ready to be sent to the client PC during initialization of SSL connection.
The best-known Certification Authority companies are Verisign ( Thawte ( and Comodo.

28. “Bandit” Control Network Infrastructure Domain authentication
LAN switching
Throughput speeds up to 10gb
Secure remote access via Cisco IPSEC and SSL VPN
Citrix Presentation Server compatible
HL7 interfaces
Domain authentication
Password suppression
Data access by multiple users
Audit capable as required by HIPAA and Privacy Act
Restrict and require data fields
End to end data encryption

29. The Good... Incorporates external customers into our process
Security maintained
External user accountability
Electronic record
Gain efficiency
Workload reports
Flexibility
allows external user access - Soft system
Ease of ordering
Ease of receiving/reviewing results
No more fax, , or snail mail

30. ...Bad & the Ugly Security hurdles User cooperation
Active X control
Group policy
External link (DMZ)
Non-NIH personnel (credentialing)
User cooperation
Time required for setup/training
User maintenance
SCR!!!

31. Future Plan - prospecting...
Complete implementation of SWP in all animal testing areas
Implement label printers in heavy use areas
Apply SWP in Pharmacy Dept.
Offer “view results only” option for non-lab staff
Tie into SoftMedia
ROE/Future Orders
Draw List Collection
Collect from Orders Tab

32. ... To Infinity and Beyond! ?