Project CROWNWeb | Consolidated Renal Operation in a Web-enabled Network

Site Search

Latest news

• Aug 31

  CROWNWeb Phase III: Multi-Factor Authentication

  Due to the sensitivity of the data available via CROWNWeb, the system must adhere to federal guidelines highlighted in Section 5.3.3.2 of the QualityNet System Security Policy (published November 2009). This segment of the policy indicates that automated user identification and authentication mechanisms must be in place and well supported for all QualityNet information systems. To meet this requirement, during Phase III, CMS will implement an identity verification process that will provide users with a one-time pass code via a phone call, text message, or e-mail. A new code will be required for each CROWNWeb session, and will be automatically generated once the user enters his/her correct username and password on the login screen of the QualityNet Identity Management System (QIMS). Once CROWNWeb issues the pass code, users will have up to 30 minutes to enter it on the log in screen to gain access to the system, and users will be able to have their computers "remember" the code so that it is valid for that one user at that one computer for up to 12 hours. Further details regarding CROWNWeb security protocol will be discussed prior to the release of CROWNWeb Phase III and the full national implementation.
• Jul 30

  QIPS Accounts to Automatically Convert over into New QIMS System

  Phase III (set for January 2011), will include a new account management system that will provide identity credential to users who will need access to CROWNWeb. All users will need to follow an account management process defined in CMS' new QualityNet Identity Management System (QIMS). QIMS, which will be a replacement of the current QualityNet Identity Provisioning System (QIPS), will provide a more robust and secure account management service that will include end-user recertification, annual security training, and a confirmation system in which multiple identifiers are used to validate user credentials (multi-factor authentication). All users should continue to register for and/or maintain access to CROWNWeb via the QIPS system until further notice. Users with established QIPS accounts will have their accounts automatically converted over into QIMS. Further details regarding the transition from QIPS to QIMS will be discussed prior to the release of CROWNWeb Phase III and the full national implementation.
• Jun 30

  CROWNWeb Phase III Coming January 2011!

  On June 23, 2010, CMS distributed a CROWN Memorandum to the ESRD Networks that announced the release of CROWNWeb Phase III, and the expected national release date. Phase III will officially kick-off in January 2011, and will include at least 360 dialysis facilities (both independent and corporate dialysis facilities). Phase III will also introduce CMS' QualityNet Identity Management System (QIMS), a replacement of the QIPS account activation system, and Multi- Factor Authentication, a federal security requirement in which an additional level of authentication is used to verify an identity. Similar to the previous releases, this installment will provide CMS with an opportunity to conduct usability analyses, and will play a role in the finalization of the national release date. Once CMS deems Phase III to be successful, it will then target the full national release of CROWNWeb for an anticipated late Spring 2011 release date.