Image of the eHBA (electronic health professional card)

Everything you need to know about the electronic health professional card (eHPC)

With the electronic health professional card (eHPC) healthcare professionals obtain personalised access to the telematics infrastructure (TI). This allows them use of the various TI specialist applications.

Which TI applications can be used depends on the access rights granted to each healthcare profession. The eHBA always includes a qualified electronic signature (QES). It can be used to sign e-prescriptions, electronic certificates of incapacity for work (eAU), invoices or electronic prescriptions. You can order the eHBA from D-Trust, a subsidiary of the Bundesdruckerei Group.

The benefits of the eHBA

Inhalt

Benefits
Function
Target Groups
Telematics Infrastructure
Applications
Products
FAQ

All benefits at a glance

How to apply for your eHPC

Why do you need an eHBA?

The credit card-sized eHBA contains a microchip that stores personal data and is used for authentication. This is necessary to use the TI applications and to exchange documents and data via this network. It also includes encryption and signing functions. This allows, for example, medical letters, test results and e-prescriptions to be exchanged digitally and signed electronically with legal effect.

The eHBA for doctors and pharmacists features a photo. This makes it a photo ID that allows identities to be checked at a glance.

In addition, the card is required in some sectors to order the SMC-B – the practice and institution card. The SMC-B is an essential second component that authenticates the facility as authorised to use the telematics infrastructure.

The eHBA includes encryption and signing functions. This allows, for example, medical letters, test results and e-prescriptions to be exchanged digitally and signed electronically with legal effect.

The eHBA is required in these cases

The electronic health professional card is mandatory for many professions in the healthcare sector. However, not all staff require an eHBA: Access to the telematics infrastructure, and thus to patient data, is granted via the SMC-B smart card.

The eHBA is also required when certain services are provided digitally. This is the case, for example, when the electronic patient record is updated, an electronic certificate of incapacity for work (eAU) is issued, or the emergency data set is signed. Anyone who provides such services must sign them personally using the electronic health professional card.

For health professions that are organised through professional chambers, these act as the card issuer. For applicants from other healthcare professions, the Electronic Health Professions Register (eGBR) acts as the card issuer. Pharmaceutical engineers, pharmacy assistants and EU mail-order pharmacists apply to gematik, the National Agency for Digital Medicine, for their eHBA.

On the D-Trust website, a subsidiary of the Bundesdruckerei Group, you can find detailed information on how to make optimal use of telematics infrastructure features in your professional field.

Dentist and medical practices — Medical and Dental Practices

Man conversation meeting — Medical insurance companies

Woman Conversation Consultation — Psychotherapists

Woman doctor tablet — Other Healing Proffesions

Dental laboratory female dental technician — Health trade enterprises

The eHPC as part of the telematics infrastructure

The telematics infrastructure (TI) connects all stakeholders in healthcare. All relevant health data are accessible and up to date, and new information is exchanged without delay or data loss. To ensure that this digital network is as secure as it is efficient, only authorised healthcare providers have access. Institutions such as hospitals, pharmacies and medical practices authenticate themselves using the SMC-B institution card. Staff in these institutions authenticate themselves with the electronic health professional card.

The credit card-sized health professional card shows the name, professional title, for some professions a photo, and the validity period of the eHPC. The information for authentication and signing within the telematics infrastructure is stored as certificates on the microchip. Each eHBA therefore contains an integrated identification number, the telematics ID, which enables unique identification within the telematics infrastructure.

eHealth card readers are also part of this infrastructure. These card terminals are connected to devices known as connectors. The connectors encrypt and decrypt information that is sent and received within the telematics infrastructure.

Overview of TI technical components

These applications can be used with the eHBA

Apply for your eHPC now

With the health professional card, legally binding electronic signatures (qualified electronic signature, QES) can be created. KIM (communication in healthcare) is used as an encrypted service for sending and receiving messages and attachments such as laboratory data or X-ray images, as well as treatment or cost plans.

Which TI applications can be used with the eHBA depends on the access rights granted to the professional group. Medical staff can view only as much information as they need to provide care for patients. With the electronic health professional card, healthcare staff can securely authenticate themselves in order to use TI specialist applications.

These applications include:

Electronic patient record (ePA)

The electronic patient record (ePA) for all, brings together all key health data such as medical letters, medication and test results. For healthcare providers, it opens up new ways of efficient and secure delivery and documentation of healthcare across multiple sectors. The aim is to improve care for insured persons in the long term.

Electronic doctor’s letter

Doctor’s letters are no longer exchanged on paper, but digitally thanks to telematics infrastructure. Test results, medication, image files and other additional information are included in the eDoctor’s letter in the ePA.

E-prescription and eAU (certificates of incapacity for work)

Prescriptions are issued digitally and can be collected at the pharmacy or redeemed online using the electronic health card (eGK) or an app. Paper printouts are also no longer required for electronic certificates of incapacity for work (eAU), which are sent directly to employers or the health insurance fund.

Electronic Medication Plan (eMP)

The medication plan is intended to provide a structured overview of the medicines the patient is currently taking. It should also provide important additional information to help avoid undesirable interactions. At present, the medication list in the ePA provides an overview of all medicines prescribed to the patient.

Emergency data management (NFDM)

Emergency data – information relevant in an emergency – can, at the patient’s request, be stored directly on the electronic health card (eGK) using the emergency data management service.

Master data management for insured persons (VSDM)

Insured Person Master Data Management (VSDM) makes it possible to check the master data of insured persons on their electronic health card (eGK) online and update it directly if necessary.

Key products related to the eHBA

SMC-B card for medical practices/institutions

The SMC-B card is the key to the telematics infrastructure and can be used by all stakeholders in the healthcare industry to identify themselves as a medical institution.

SM-B Institution Certificates: Virtual proof of identity for institutions

The SM-B institution certificates provide the health care system with hardware-independent and card-free secure access to the telematics infrastructure. This makes it possible to access EHC data.

Frequently asked questions about the electronic health professional card

Digitalisation is changing many processes in the healthcare sector. This gives rise to many questions. Here are the answers to some of the most common questions about the eHBA.

Different issuers are responsible for the eHBA depending on the healthcare profession.

Applying for an eHPC step by step

The electronic health professional card is ordered from trust service providers (TSPs) such as D-Trust, a company of the Bundesdruckerei Group. D-Trust produces the eHBA and then dispatches it.

More about the ordering process

The delivery time for the eHBA is about ten days after D-Trust has received all the required documents. This means thatthe application has been completed online, identification has been successfully carried out, and D-Trust has received approval from the responsible card issuer. Once the eHBA has been sent by registered mail, you will receive a separate registered letter about three days later containing the PIN (and PUK), which is used to activate the smartcard in the card terminal.

During periods of very high order volumes, delivery may take longer.

To unlock your eHBA, you need your reference number and your password (as shown in your application). You can unlock your eHBA in the D-Trust eHealth Application Portal under the option “Open my created applications”. By unlocking it in the D-Trust eHealth Application Portal, you notify us that you have received your card.

Activation via a card terminal is then required. Activation is performed via your primary system. Only after this step is your eHBA ready for use with the TI. To activate your eHBA, you need the five-digit PIN from the PIN/PUK letter and a card reader. For safety reasons the PIN/PUK letter from D-Trust is sent by separate post, usually about three days later.

Introduction of the telematics infrastructure involves costs. This applies to card readers and connectors as well as the eHBA and the practice and institution card. Procurement is subsidised through refinancing agreements with the National Association of Statutory Health Insurance Funds. The amount of funding depends on the sector. For detailed information, please contact the card issuer responsible for you.

An overview of the refinancing arrangements is provided by the National Association of Statutory Health Insurance Funds.

Trust service providers (TSPs) such as D-Trust, a company of the Bundesdruckerei Group, produce the electronic health professional cards.

Find out more here.

The electronic health professional card is valid for a maximum of five years and cannot be renewed. Afterwards, you must apply for a follow-up card or a new eHBA from another provider. D-Trust will inform you in good time before expiry so that a follow-up card can be ordered.