Authentication, access control, and authorization (MU2)

MU Requirements

Per ONC

Taken from ONC Final Rule:File:2014 Edition Cert Federal Register.pdf

(1) Authentication, access control, and authorization. (i) Verify against
a unique identifier(s) (e.g., username or number) that a person seeking access to electronic health
information is the one claimed; and
(ii) Establish the type of access to electronic health information a user is permitted based on
the unique identifier(s) provided in paragraph (d)(1)(i) of this section, and the actions the user
is permitted to perform with the EHR technology.

Per ONC/NIST Final Test Methods

See here: http://www.healthit.gov/policy-researchers-implementers/2014-edition-final-test-method

Links

• OpenEMR Certification Stage II Meaningful Use Main Project Page
• User Authentication wiki page for stage I certification
• Controlling Access wiki page for stage I certification