How To Create A Secure Web Portal For A Prison System

Transcription

1 ALABAMA SECURE SHARING UTILITY FOR RECIDIVISM ELIMINATION (ASSURE) PROJECT OVERVIEW National Forum on Criminal Justice Breckenridge, CO August 12, 2014 Becki Goggins Director, Knowledge Management Alabama Office of Information Technology

2 PURPOSE OF ASSURE PROJECT Create a secure, web-based portal to share appropriate information regarding clients, probationers and inmates Organizations involved Alabama Department of Mental Health (ADMH) Community Mental Health Centers (CMHC) ADMH Substance Abuse Contract Providers Alabama Board of Pardons and Paroles (ABPP) Alabama Department of Corrections (ADOC)

3 BACKGROUND According to the USDOJ 56.2% of state prison inmates have a history of mental illness and/or behavioral health problems 64.2% of local jail inmates have a history of mental illness and/or behavioral health problems 74.1% of inmates with a history of mental illness and/or behavioral health problems have a history of substance abuse or dependency 55.6% of inmates without a history of mental illness and/or behavioral health problems have a history of substance abuse or dependency

4 IN ALABAMA Alabama Department of Corrections 3,000 inmates in active mental health caseload 4,100 inmates participating in a substance abuse program Nearly all of these offenders will re-enter the community! Alabama Board of Pardons and Paroles Responsible for ensuring that persons under supervision participate in court-ordered mental health and substance abuse treatment services Alabama Department of Mental Health Operates two state hospitals Provides funding for the 25 Community Mental Health Centers and contract substance abuse that provide community based treatment services

5 SAMPLE USE CASES Allow probation officers to monitor probationers compliance with court-ordered mental health and substance abuse treatment Allow intake and classification personnel at ADOC to be aware of inmates with a history of serious mental illness Allow community mental health and substance abuse providers to view diagnosis and treatment history of offenders re-entering the community

6 IMPROVEMENTS ADDRESSED Improve communication among entities responsible for providing and coordinating mental health and substance use services Improve continuity of care to individuals who move between incarceration and the free world Increase awareness of availability of community-based mental health services Produce a more accurate and complete profile of offenders Sentenced to DOC Receiving behavioral health and substance use services through mental health clinics funded through ADMH Under the supervision of ABPP

7 ASSURE GOALS Increase effectiveness and efficiency of the intake and classification process ADMH, ABPP, DOC, CMCHs, SA Providers Reduce reliance on emergency department services Refer people leaving correctional facilities to community-based behavioral health and substance use treatment services Providing clinical information to assist with their treatment Ensure timely access to essential medications for people entering or leaving jail or prison Link correctional health providers to ADMH and community-based behavioral health services Reduce recidivism by ensuring that offenders whether in a community or incarceration setting receive services matched to their individual needs Educational, Vocational, Rehabilitation, Treatment

8 SYSTEM REQUIREMENTS Computer Internet connection User name and password Printer (for those who will be responsible for enrolling clients in consent registry)

9 GLOBAL STANDARDS BEING DEPLOYED

10 NATIONAL INFORMATION EXCHANGE MODEL (NIEM) Common semantics (definitions) Example: What is a disposition? AGENCY A Common syntax (structure) for sharing information Person P_DOB: F_name: John L_name: Smith AGENCY B Person dob: 2/12/53 First: John Last: Smith AGENCY C Person birthdate: 2/12/53 Fn: John Ln: Smith Map Map Map <Person> <PersonBirthDate> </PersonBirthDate> <PersonName type= Primary > <PersonGivenName>John</PersonGivenName> <PersonSurName>Smith</PersonSurName> </PersonName> </Person>

11 GLOBAL REFERENCE ARCHITECTURE (GRA) Specialized implementation of Service Oriented Architecture (SOA) Service Specifications Packages Connection Method (Web Services) Exchange Language (NIEM) Security Specifications (Encryption at the transport layer, data layer, etc.) Does not require replacement of legacy systems in order to communicate

12 GLOBAL FEDERATED IDENTITY AND PRIVILEGE MANAGEMENT (GFIPM) Provides standardized set of user, entity and resource attributes much like NIEM provides common definitions for data GFIPM allows us to create a machine-readable way to automatically enforce complex access control rules Example [Permit or Deny] a [Requestor] the ability to perform the requested [Action] on an information [Resource] for a specific business [purpose] subject to one or more [Permit] a [Requestor User from community Substance Abuse Treatment Provider] the ability to [Action get document ] from a [ Resource Prison EHR system] for a specific business [Purpose - Drug Treatment] subject to one or more [Conditions - Client Consent, Court Order, Client referral for Drug Treatment] and data handling [Obligations - Encrypt Medical Records obtained, no Secondary Dissemination]

13 The Interoperability Challenge NIEM GRA Privacy Technology Policy Best Practices Governance data stored & interpreted disparately different architectures & technologies GFIPM Experience variety of credentialing & access rules

14 HIGH LEVEL ASSURE DESIGN DOCUMENT

15 PROGRESS TO DATE Interagency MOU Project Charter Established Advisory Board 2 meetings to date Entered into contract with University for development work Draft Privacy Policy Identified Datasets for Information Sharing Conducted two-day, in-depth requirements gathering session with SMEs from participating agencies facilitated by SEARCH Developed prototype consent registry function

16 NEXT STEPS SEARCH Mapping ADMH and ADOC Data Elements to NIEM GRA Technical Readiness Assessment GRA Architecture Document Service specification packages and business process models Create NIEM conformant extensions to support justice to health exchanges WS-Policy assertions security, reliability, etc. Web Services Description Language (WSDL) documents University of Alabama Center for Advanced Public Safety Begin testing with real data to determine which how queries should be performed Governor s Office Team and Georgia Tech Research Institute Develop new GFIPM user, entity and resource attributes to support justice to health exchanges

17 QUESTIONS? Becki R. Goggins Director, Knowledge Management Office of Information Technology 100 North Union Street Montgomery, AL