From cac1c0ef0f9b76bb6a2b5040b3f17a754d0fadf4 Mon Sep 17 00:00:00 2001 From: Stephanie Maguire <135721386+stephaniemaguire@users.noreply.github.com> Date: Wed, 24 Jan 2024 12:29:12 +0000 Subject: [PATCH] user-journey-fix --- src/user-journeys copy.md | 249 -------------------------------------- src/user-journeys.md | 1 - 2 files changed, 250 deletions(-) delete mode 100644 src/user-journeys copy.md diff --git a/src/user-journeys copy.md b/src/user-journeys copy.md deleted file mode 100644 index a365431..0000000 --- a/src/user-journeys copy.md +++ /dev/null @@ -1,249 +0,0 @@ ---- -layout: base.njk -title: NHS login user journeys ---- - -All of the NHS login user journeys start with the NHS login button on your website or app. These journeys cannot be changed or customised. - - - ---- - -

Low level verification (P0)

- -Only the user’s email address and phone number are required to register for a service. Users can log in with an email address and password, with or without the need for an OTP (one time password). - -
- Open the P0 user journey in a new window -
- Diagram showing the P0 user journey -
-
- -
- -
-
-
-
    -
  • User verified email & phone number
    • -
- Claims are not automatically provided to the partner service. Some claims will need to be requested and then approved by NHS login. View scopes and claims for more information. -
-
- -
-
-
-
-
-
    -
  • User identity not verified
    • -
  • No NHS number
    • -
  • No checks with their NHS Personal Demographics Service (PDS) record, (held on Spine)
    • -
  • No GP surgery code (ODS code)
    • -
  • No GP surgery online registration information (linkage key) - which allows access to medical records
    • -
-
-
-
-
-
- -

What users can do at P0

- - - - - - ---- - -

Medium level verification (P5)

- -To gain a medium level verification, the user must first complete a low level verification (P0) journey. - -Users can’t access medical records or personal information, nor should the user transfer sensitive or personal information. The Partner Service can’t disclose sensitive information or medical record data. - -This level of verification is just a claimed identity. If a Partner Service wishes to use and rely on the user’s NHS number they need to request a high-level verification (P9). - - -
- Open the P5 user journey in a new window -
- Diagram showing the P5 user journey -
-
- -
- -
-
-
-
    -
  • User verified email and phone number
    • -
  • User verified date of birth, NHS number, first name and last name – this information has been checked with their NHS Personal Demographics Service (PDS) record (held on Spine)
    • -
  • User verified the area code of their postcode – this information has been checked with and ‘fuzzy matched’ to their NHS Personal Demographics Service (PDS) record (held on Spine)
    • -
  • GP surgery code (ODS code)
    • -
- Claims are not automatically provided to the partner service. Some claims will need to be requested and then approved by NHS login. View scopes and claims for more information. -
-
- -
-
-
-
-
-
    -
  • User identity based only on claimed credentials
    • -
  • No GP surgery online registration information (linkage key) – which allows access to medical records
    • -
-
-
-
-
-
- -

What users can do at P5

- -In addition to what users can do with low level verification (P0), users can also: - - ---- - -

High level verification (P9)

- -To gain a high level verification, the user must first complete a low and medium level verification (P0 & P5) journey. - -There are three ways in which a user can acquire high level verification (P9). The use cases and what the Partner Service gets are the same but the user journey is different. - -High level verification (P9) is needed when personal, confidential or sensitive information is being communicated either to or from the user. It is also required when the user can access their medical records e.g. GP record via a 3rd party – such as Co-op Health app, NHS App or TPP Airmid. - -Identity verification via mobile (IDVM) is only available to medium level verified (P5) users who are registered for Patient Online (POL) at their GP and their phone number matches the one against their GP record. - - -
- Open the P9 IDVM journey in a new window -
- Diagram showing the P9 IDVM user journey - Open the P9 PYI journey in a new window -
- Diagram showing the P9 PYI user journey -
- Open the P9 POL journey in a new window -
- Diagram showing the P9 POL user journey -
-
-
- -
- -
-
-
-
    -
  • User ID fully authenticated
    • -
  • User verified email and phone number
    • -
  • User verified date of birth, NHS number, first name and last name – this information has been checked with their NHS Personal Demographics Service (PDS) record (held on Spine)
    • -
  • GP surgery code (ODS code)
    • -
  • GP surgery online information (linkage key) – which allows access to medical records
    • -
- Claims are not automatically provided to the partner service. Some claims will need to be requested and then approved by NHS login. View scopes and claims for more information. -
-
-
-
-
- -

What users can do at P9

- -In addition to what users can do with medium level verification (P5), users can also: - - ---- - -Download the NHS login User Journey Visuals presentation. - diff --git a/src/user-journeys.md b/src/user-journeys.md index 55cbb9e..4e08805 100644 --- a/src/user-journeys.md +++ b/src/user-journeys.md @@ -136,7 +136,6 @@ This level of verification is just a claimed identity. If a Partner Service wish Claims are not automatically provided to the partner service. Some claims will need to be requested and then approved by NHS login. View scopes and claims for more information.