The National Health Information Center has abandoned the plan to obtain a copy of the authorization module. He relies on the inside.
Since the spring, the state has not moved substantially when it comes to the use of ID card readers with a chip for ambulances and pharmacies. The problem is slowness. In short, patients and pharmacists would have to wait too long, the National Health Information Center points out.
In April, his boss, Peter Blaškovitš, said that the solution could be to strengthen hardware, create verification mechanism clones, or modify codes. This is no longer the case. We have been investigating what has changed since then.
No need for onslaught. The system is always slow
Blaškovitš points out that the demands on the performance of the verification mechanism will continue to rise. Children under 15 years of age should also receive electronic cards, and can use them not only in health care but also in education, for example in canteens – there are many potential services.
If the number of users were growing, there would not only be a slowdown, but a complete cessation of service, says the head of the National Health Information Center for Live.com.
Neither does it take the first steps. The National Center has also done some. “We have also made adjustments on our side, the services have been optimized, some have been modified in cooperation with the Ministry of the Interior. Today we have reached a level somewhere around 10-12-14 seconds [reaction time], ”Blaškovitš told Živé.sk.
The exact response value also depends on the time of day when the verification occurs.
The problem, however, is not to be the number of requests sent – the system is already slow at one of them.
“An unnecessary six times SSL connection is called, the token has to be replaced twice, and so on. So communication, how to get a token from their information system, is quite complicated, ”Blaškovitš said.
In addition, the National Health Information Center has been promised by the Home Office to move the authorization technology to the cloud and its availability will be scalable – that is, its performance will be customizable as required.
We asked the Ministry of Interior – about migration, its time horizon as well as possible further improvements, technical limits and the status of the service contract with the supplier. We didn’t see any specific answers. New information is not even NCZI, confirmed his spokesman Boris Chmel.
They couldn’t control the clone
Even if you move to the cloud and become scalable, it may not be enough. “There is still a question, let’s call it the performance of the application itself. Whether we come across business logic, which, even when deployed, does not let us in principle go somewhere else, ”Blaškovitš said.
The Ministry of Interior and its supplier DXC Technology are responsible for the entire operation. Originally the company was called Hewlett Packard Slovakia.
The company did not send any reply to the editorial questions after three weeks. At the press conference, we addressed Michal Ševčík from DXC Technology, who participated in several projects of the Slovak Ministry.
“There are certainly some limits, but I can’t say what. And I don’t think we got into the limits today. As far as I know, there is a project prepared by the Ministry of Interior to optimize the infrastructure so that part of the process is accelerated, ”he told Zive.sk.
But it seems better to change the verification process – about communicating with the server, which Blaškovitš also mentioned.
However, Ševčík does not think that after inserting a card, a citizen would wait 10 to 14 seconds. “We did the tests, and they certainly say it’s under 10 seconds, well below 10 seconds,” he says.
The Ministry of the Interior did not respond to the question of whether today, when eZdravi, together with chip ID cards, guarantees trouble-free operation without excessive delay and falls.
They have to negotiate conditions
The National Center for Health Information presented the Ministry of Interior with draft terms of service (SLA) and set the parameters of the services provided.
Negotiations are underway, which ones are acceptable, discussable, and unacceptable.
In April, Blaškovitš mentioned as a potential solution a copy of the authentication module, which would regularly update the certificates from the Ministry’s server.
He eventually dropped the idea. He says he has the disadvantage of having to invest money and, in addition, with the technology, so they would have to learn to manage it.
Wouldn’t the NCZ boss worry less if he hadn’t canceled the electronic health insurance card project ? The decision not to issue additional documents is considered correct despite the above-mentioned complications.
If they returned to them, it would be perverse, he said unequivocally. He recalled that in the state IT, one electronic card had already been chosen for everything like Estonia. “This should certainly be one of the priorities of the Interior Ministry. We also try to communicate very closely with the Deputy Prime Minister’s office on this subject, ”he said.
If the state had invented an alternative method of verification for eHealth, Blaškovitš sees the problem in the law – the identification card is considered to be the ID card with the chip and the permission to access the records for the specialist as well as the electronic conclusion of the contract with the general practitioner must be guaranteed by him.
And what about the ID card but offline? “If I could at least read the birth number from the chip, I could speed up some things. But unfortunately, it is not so. I have to insert it, it has to ask for a token, replace the certificates and decode the chip content, ”Blaškovitš added.