With the Cardlink process, which is due to arrive in the next few weeks, online pharmacies hope to have access to e-prescriptions. They have called for a sender solution for the e-prescription, as insured persons currently have to send a photo of the e-prescription printout to the online pharmacies. What was discussed in this process was that an SMS code would be used instead of the PIN for the electronic health card. In this way, insured persons can, for example, use remote services such as an online pharmacy, for example to redeem their e-prescription. The electronic health card will continue to be used.
Advertisement
Not “state of the art”
Companies are increasingly refraining from using SMS TANs due to security concerns; savings banks have already put them to rest years ago. The Federal Office for Information Security (BSI) also confirmed to heise online that the procedure should only apply temporarily. The BSI has recommended that Gematik – which promises the final specifications for Cardlink for the first quarter – “only consider its use on a temporary basis until the health ID is rolled out across the board,” says a BSI spokesman in response.
Although the concept for Cardlink is specified by Gematik, the “application-related parts”, for example the redemption of the e-prescription using Cardlink, are “not directly part of the regulation”, nor are the associated recommendations in the implementation guidelines, according to the spokesman . Both do not correspond to the state of the art.
Health ID more secure
The BSI therefore recommends using the e-prescription “in the legally guaranteed form confirmed by the BSI with an electronic health card and PIN entry” until insured persons have received a health ID from their health insurance companies.
(mack)