Secure Supply Chain
Protect Sensitive Patient Data
The telematics infrastructure was designed to connect all institutions in the healthcare system. In addition to doctors, psychotherapists, pharmacies, and hospitals, statutory health insurers are also part of this network.
The goal of this system is to make medical patient information—such as prescriptions, reports, or emergency data—available more quickly and easily for all parties involved.
Since this information is exchanged online, it is essential to protect patient data from tampering and theft. All components are equipped with specific security mechanisms, and a device-specific Security Module Card ensures reliable encryption of sensitive patient information.
Secure Supply Chain Protects Your Device During Transport
One of the key components in the practice is the eGK card reader. To ensure the device is not tampered with during storage or transport, the “Secure Supply Chain” was developed.
This supply chain guarantees that the product is protected against manipulation from production until it reaches the customer, ensuring the sensitive patient data remains fully secure.
1. Secure Storage
The production and distribution warehouses must meet specific requirements to ensure that the exact devices stored are the ones issued, and that no unauthorized access occurs. This is achieved through a combination of technical and organisational measures, including:
- Video surveillance
- Access control systems
- Electronic inventory management systems
- Staff training
- Inspection checklists
The requirements must be reviewed by the manufacturer at least annually.
Storage of the devices must comply with the following:
- Controlled access and documentation
- Preventive measures
- Staff training and documentation
- Documentation of goods flow and security
- Damage handling
- Theft notification
2. Secure Transport
To protect the card terminal during transport and ensure it is delivered only to the authorised recipient, two key security measures are applied.
First, the package is sealed with a special tamper-evident tape. If this tape is damaged, removed, or reapplied, it becomes clearly visible to the recipient. The tape includes the manufacturer’s logo and barcode at regular intervals, as well as a type of watermark that appears only if the tape has been tampered with. In this case, the word "opened" is visible in several languages.
Second, the recipient receives a delivery notification by post before the card reader is delivered. The package will only be handed over if the recipient can present this notification to the courier. This ensures that no unauthorized person can receive the card reader.
Frequently Asked Questions About the “Secure Supply Chain”
Is it possible to trace the supply chain of my device?
Yes, you can verify the secure supply chain by contacting the service hotline of Ingenico or Cherry. Please have the following information ready when you call:
- Device serial number
- MAC address (for ORGA 6141 online devices)
- Barcode number on the tamper-evident seal
Service hotline: 04347 90 11 111 (Ingenico); 09643 2061 100 (Cherry)
What should I do if the seal on my package is damaged?
If the word “opened” is visible on the seal, tampering cannot be ruled out. In this case, please refuse to accept the package. If refusal is not possible, do not put the device into operation. Contact your supplier immediately to discuss the next steps.
How does Praxisdienst ensure a secure supply chain?
Praxisdienst has a dedicated cooperation with the manufacturers Ingenico and Cherry, allowing devices to be shipped directly from the production warehouse to the customer. The devices are not routed through Praxisdienst before delivery, but sent straight from the factory to the customer. This guarantees the highest level of security for the end user, minimising the risk of tampering.