Greenway Medical Technologies PrimeSuite Integrated EHR, PM and Interoperability Solution

Transcription

1 Greenway Medical Technologies PrimeSuite Integrated EHR, PM and Interoperability Solution Technical Review and Hardware/Software Requirements Contents Technical Review Application Architecture Application Security Deployment Models Deployment Options Installation Environment Installation Management Hardware/Software Requirements Client and Hardware Configurations Client and Software Platforms October 25, 2010, version 3

2 Application Architecture PrimeSuite is a scalable multi-layer, 3-tier, web application. The solution s EHR, PM and interoperability components share one codebase in addition to one database. This represents a major advantage over traditional client/server applications where the EHR and PM offerings commonly employ two dissimilar codebase languages and two dissimilar database platforms, requiring a dedicated interface engine for real time workflow requirements. User Presentation Layer Client { Versions 7 and 8 Business Logic Layer Data Access Layer Application/ Web (s) { (s) { Integrated Development Environment (IDE): Microsoft Visual Studio (C# / Visual Basic) Software Framework: Microsoft.NET Web Application Framework: Microsoft ASP.NET Web : Microsoft Internet Information Services (IIS) Version Page 2 of 23

3 Application Security User Client { Versions 7 and 8 { Application/ Web (s) { (s) Successful Login - User launches the PrimeSuite web client (Client) - User supplies the PrimeSuite credentials (username/password) (Client) - Microsoft Internet Information Services (IIS) authenticates the web client request () - Microsoft Internet Information Services (IIS) provides the access to respective PrimeSuite ASP.NET resources () - PrimeSuite ASP.NET resources authenticate to Microsoft SQL and connect to the PrimeSuite database () - PrimeSuite ASP.NET resources authenticate the supplied PrimeSuite credentials () - User is granted access to the appropriate PrimeSuite feature/functionality Version Page 3 of 23

4 Deployment Models PrimeSuite can be deployed via Thick Client and Thin Client or via a combination of the two. Use of the Thin Client model is encouraged when multiple locations are part of the overall network topology. For example, when remote locations are connected to the main office via public Internet based Virtual Private Network (VPN) tunnels or via heavily used private media connections where additional applications, telephony and the Internet may also be accessed from the main office. The Thin Client option is also beneficial in environments where client hardware and software configurations do not meet those required for a Thick Client deployment. Greenway Medical Technologies recommends the use of Microsoft Windows 2008 R2 Remote Desktop Services (RDS). Estimated bandwidth for basic calculations (thick client): 300Kbps per session (excludes additional applications, telephony and Internet traffic) Thick Client Inclusive Application/Web/ Client Machines PrimeSuite Web Client - or - Distributed Peripherals Local Area Network (private) Hypertext Transfer Protocol (HTTP) Printer Scanner Application/Web (s) (s) Version Page 4 of 23

5 Thin Client Estimated bandwidth range for basic calculations (thin client): 35 to 60Kbps per session (excludes additional applications, telephony and Internet traffic) Remote Desktop Connection Local Area Network (private) Remote Desktop Protocol (RDP) Inclusive Client Machines Peripherals Wide Area Network (private) Remote Desktop Protocol (RDP) Application/Web/ Remote Desktop Services (s) - or - PrimeSuite Web Client Distributed Printer Scanner Virtual Private Network (VPN) (public media/private tunnel) Remote Desktop Protocol (RDP) Application/Web (s) (s) Version Page 5 of 23

6 Deployment Options PrimeSuite can take advantage of industry standard technical offerings including the use of load balancing, clustering, virtualization, medical devices, faxing, printing, scanning and transcription. This applies to both the Thick Client and Thin Client deployment models. *Note: While both hardware and software based load balancing solutions offer the ability to distribute HTTP traffic, Greenway Medical Technologies recommends the use of industry standard hardware based load balancing devices. *Note: The use of Virtualization requires on premise expertise for proper installation and ongoing maintenance. Greenway Medical Technologies recommends that all servers reside on dedicated physical hardware, however the organization also recognizes the direction of Virtualization and will continue to test with Microsoft and VMware based solutions as they progress forward. All Application/Web, and Remote Desktop Services servers should be appropriately configured to match (as closely as possible) to the recommended physical server configurations notated in this document. Load Balancing Distributed Application/Web Hypertext Transfer Protocol (HTTP) Traffic Hardware Based Load Balancing - or - Software Based Load Balancing Application/Web (s) Application/Web Version Page 6 of 23

7 Clustering (Microsoft Failover Cluster) Distributed Application/Web s (Load Balanced) (Not Clustered) Application/Web C:\ (OS) Quantity 2 (local) RAID 1 Operating System Application/Web C:\ (OS) Quantity 2 (local) RAID 1 Operating System Distributed Node A (Active) s (Clustered) Node B (Passive) Direct Attached Storage (DAS)/Storage Area Network (SAN) Q:\ (Quorom) Quantity 2 (DAS/SAN) RAID 1 Quorom C:\ (OS) Quantity 2 (local) RAID 1 Operating System C:\ (OS) Quantity 2 (local) RAID 1 Operating System M:\ (MSDTC) Quantity 2 (DAS/SAN) RAID 1 MSDTC F:\ (SQL BU s) Quantity 2 (DAS/SAN) RAID 1 SQL Backups L:\ (SQL TL s) Quantity 2 (DAS/SAN) RAID 1 SQL Transaction Logs Quantity 4 (DAS/SAN) RAID 10 SQL Data D:\ (SQL Data) Version Page 7 of 23

8 Virtualization (Microsoft Hyper-V/VMware ESX Stand Alone) Remote Desktop Services VM(s) Hyper-V C:\ (OS) Application/Web/ VM -or- Application/Web VM Quantity 2 (local) RAID 1 Operating System with Hyper-V Role (core/full) (Physical)* Quantity 4 (local) RAID 10 Virtual Machine Data D:\ (VM Data) Remote Desktop Services VM(s) ESX Quantity 4 (local) RAID 10 Virtual Machine Data -and- Application/Web/ VM -or- Application/Web -and- VM (Physical)* *Note: Physical server recommended in large environments. Version Page 8 of 23

9 Virtualization (Microsoft Hyper-V High Availability) Node A (Active) Remote Desktop Services VM(s) Microsoft Failover Cluster Hyper-V Application/Web/ VM -or- C:\ (OS) Application/Web Quantity 2 (local) RAID 1 VM Operating System with Hyper-V Role (core/full) Node B (Active) Remote Desktop Services VM(s) -and- (Physical)* Cluster s Direct Attached Storage (DAS)/Storage Area Network (SAN) Q:\ (Quorom) Quantity 2 (DAS/SAN) RAID 1 Quorom M:\ (MSDTC) Quantity 2 (DAS/SAN) RAID 1 MSDTC Quantity 4 (DAS/SAN) RAID 10 Virtual Machine Data D:\ (VM Data) Hyper-V Application/Web/ VM -or- Application/Web -and- Quantity 2 (local) RAID 1 VM Operating System with Hyper-V Role (core/full) (Physical)* *Note: Physical server recommended in large environments. Version Page 9 of 23

10 Virtualization (WMware ESX High Availability) Node A (Active) Remote Desktop Services VM(s) Vmware vsphere Environment ESX Application/Web/ VM -or- C:\ (OS) Application/Web -and- Quantity 2 (local) RAID 1 VM Operating System with Hyper-V Role (core/full) Node B (Active) Remote Desktop Services VM(s) (Physical)* Direct Attached Storage (DAS)/Storage Area Network (SAN) Quantity 4 (DAS/SAN) RAID 10 Virtual Machine Data D:\ (VM Data) ESX Application/Web/ VM -or- Application/Web -and- Quantity 2 (local) RAID 1 VM Operating System with Hyper-V Role (core/full) (Physical)* *Note: Physical server recommended in large environments. Version Page 10 of 23

11 Medical Devices PrimeSuite can communicate with many popular medical devices that supply ECG, Spiro, Holter, Stress and Vitals information. Please inquire with a Greenway Medical Technologies representative for specific information regarding compatible/supported manufacturers and associated models. Faxing PrimeSuite natively supports the use of the Equisys Zetafax fax server solution ( Incoming and outgoing fax requests are addressed directly within the PrimeSuite application. Alternative solutions such as OpenText RightFax may also be utilized. Thick Client Thin Client Client Machines PrimeSuite Web Client Remote Desktop Services (s) PrimeSuite Web Client LAN/WAN/VPN LAN Inclusive Application/Web/ (with Fax software) Fax Modem Analog Phone Line Outgoing Fax Incoming Fax Version Page 11 of 23

12 Printing PrimeSuite makes use of standard Microsoft Windows printing calls. In addition to local, network and centrally shared network printer access capabilities, the Microsoft Windows 2008 R2 Remote Desktop Services Easy Print feature may also be introduced within the Thin Client deployment model. This feature provides the advantage of auto created client side printers which use the single Easy Print printer driver, regardless of their specific make and model. Driver Specific Driver Specific Thick Client Thin Client Client Machines PrimeSuite Web Client Local Printer(s) Client Machines Local Printer(s) Driver Specific Remote Desktop Connection Easy Print (single driver) LAN/WAN/VPN LAN Network Printer(s) Remote Desktop Services (s) PrimeSuite Web Client Easy Print (single driver) Network Printer(s) Centrally Shared Network Printer(s) Easy Print (single driver) Centrally Shared Network Printer(s) Version Page 12 of 23

13 Scanning PrimeSuite supports card and document scanning in both the Thick Client and Thin Client deployment models. Thin Client scanning is implemented via the use of the RemoteScan scanning client/server solution (Link). RemoteScan operates within the Microsoft Remote Desktop Protocol (RDP) virtual channels and provides compression capabilities. Thick Client Thin Client Client Machines PrimeSuite Web Client Scanner Client Machines RemoteScan Scanner Local Access Remote Desktop Connection Remote Access LAN/WAN/VPN LAN Remote Desktop Services (s) PrimeSuite Web Client RemoteScan Client Version Page 13 of 23

14 Transcription PrimeSuite supports transcription in both the Thick Client and Thin Client deployment models. This offering is called PrimeSpeech. Each request is sent securely out to Greenway Medical Technologies in voice format and returns back to the PrimeSuite solution in text format. Thick Client The Internet (secure) Client Machines PrimeSuite Web Client (with transcription capability) Application/Web/ Outgoing Transcription (voice) Incoming Transcription (text) Version Page 14 of 23

15 Installation Environment The health of the PrimeSuite installation environment is critical. Variables such as cooling, power, security, wired/wireless networking and remote connectivity all must be in place and continuously managed. Cooling For best overall performance and lifespan, all server and networking equipment must be kept at the manufacturer s respective operating and storage temperature & humidity specifications. Please inquire with a Greenway Medical Technologies representative for specific technical information regarding Greenway supplied hardware. Power All server and networking equipment must reside in a dedicated area with appropriately configured/supplied power. In addition, use of battery backup technologies commonly known as Uninterruptible Power Supply (UPS) devices are required to provide continuing power during unplanned outages. Please inquire with a Greenway Medical Technologies representative for specific technical information regarding Greenway supplied hardware. Security Access to all server and networking equipment must be restricted to authorized persons. Dedicated areas should be secured at all times by an appropriate locking mechanism. Wired/Wireless Both wired and wireless networks are commonly utilized during each installation. All wired networking must be in place and tested prior to the installation of all server and networking equipment. Wireless networks should be configured and tested per industry standard specifics and must employ wireless encryption techniques. Please note that certain medical devices such as imaging related equipment may interfere with wireless signals. Always locate wireless access points in areas where the highest level of wireless access is needed. Version Page 15 of 23

16 Remote Connectivity In order for Greenway Medical Technologies to maintain the best client support in the industry, high speed full time remote connectivity is required to provide Application and Technical Support and to deliver application upgrades. This remote connectivity, via a full time/dedicated Virtual Private Network (VPN) tunnel, is also commonly used in conjunction with Greenway s complimentary offerings such as PrimeEnterprise, PrimeExchange, PrimeRCM and PrimeResearch. A full time Internet connection with a minimum upward/downward bandwidth allotment of 384Kbps is required along with a firewall/vpn concentrator capable of establishing a full time VPN link to Greenway s data center. Please inquire with a Greenway Medical Technologies representative for specific technical information regarding Greenway supplied hardware. Version Page 16 of 23

17 Installation Management Operating System/ Platform/Application Updates All Application/Web, and Remote Desktop Services servers should be properly configured for the use of Microsoft Update. Critical updates should be installed as they become available. Please contact a Greenway Medical Technologies Application or Technical Support representative prior to incorporating any major Operating System or Platform Service Packs into the PrimeSuite environment, as these are individually tested and certified. PrimeSuite application updates are automatically delivered to the on premise PrimeSuite environment. Post update of all Application/Web and servers, web client software is automatically upgraded on each applicable client machine only when necessary (an advantage within the industry). Malware Protection Use of an industry standard Anti-Virus/Anti-Spyware solution is required within the PrimeSuite environment. This solution will prevent, detect and remove malware, including viruses, from all client and server machines. Adware and spyware may also be dealt with. For best overall performance, all Microsoft SQL database (*.mdf) and transaction log (*.ldf) files should be excluded from all real time Anti-Virus/Anti- Spyware scanning processes. Backups Application and database file backup protection is required within the PrimeSuite environment. An industry standard solution such as Symantec Backup Exec in conjunction with its Backup Exec Agent for Microsoft SQL is recommended to provide such protection. This is in addition to daily/hourly complete and transaction log backup-to-disk database backups obtained via the Microsoft SQL SQL Agent. Greenway Medical Technologies supports both the use of tape and disk backup media. Media should be taken offsite on a regular basis and test restorations performed once per quarter. Version Page 17 of 23

18 Performance Monitoring Overall performance monitoring of the PrimeSuite environment can be done with a combination of Microsoft tools and other available third party solutions. The following utilities are either included by default within the Application/Web/ and Remote Desktop Services server(s) environment or can be easily downloaded from Microsoft. Built-In (client and Application/Web/ server level) Tools: Microsoft Windows Task Manager Built-In (Application/Web/ server level) Tools: Microsoft Windows Task Manager Microsoft Windows Performance Monitor Microsoft SQL Profiler Downloadable Tools: Microsoft Sysinternals (Link) Process Monitor Process Explorer Microsoft SQL Performance Dashboard Reports (Link) Security Access to Protected Health Information (PHI) is restricted to authorized PrimeSuite users via built-in application security. All access to PHI from outside the PrimeSuite application must be carefully granted to approved administrators, analysts and end users. Direct access to Application/Web and servers at both the Microsoft Windows and Microsoft SQL levels should be limited to administrative users only. Microsoft password policies should be used to enforce password history variables, to set minimum/maximum password age, to set minimum password length and to set complexity requirements. Version Page 18 of 23

19 Client and Hardware Configurations *Note: Greenway Medical Technologies recommends the use of industry standard 6Gb/s SAS whenever possible. Type Application/Web/ (Inclusive) (1 10 Users) (1) Intel Xeon Quad Core 4GB (4) 146GB 15K RPM SAS RAID Configuration RAID 5 Optical DVD-ROM Power Redundant (2) Gigabit Ethernet Remote Management Remote Management Adapter Backup Cartridge or Tape Application/Web/ (Inclusive) (11 49 Users) (1) Intel Xeon Six Core 12GB (4) 450GB 15K RPM SAS RAID Configuration RAID 5 Optical DVD-ROM Power Redundant (2) Gigabit Ethernet Remote Management Remote Management Adapter Backup Cartridge or Tape Version Page 19 of 23

20 Application/Web (Distributed) (80 Users Per) (1) Intel Xeon Quad Core 4GB (4) 146GB 15K RPM SAS RAID Configuration RAID 5 Optical DVD-ROM Power Redundant (2) Gigabit Ethernet Remote Management Remote Management Adapter (Distributed) (50 80 Users) (1) Intel Xeon Six Core 12GB (4) 450GB 15K RPM SAS RAID Configuration RAID 5 Optical DVD-ROM Power Redundant (2) Gigabit Ethernet Remote Management Remote Management Adapter Backup Cartridge or Tape (Distributed) ( Users) (1) Intel Xeon Six Core 16GB (4) 450GB 15K RPM SAS RAID Configuration RAID 5 Optical DVD-ROM Power Redundant (2) Gigabit Ethernet Remote Management Remote Management Adapter Backup Cartridge or Tape Version Page 20 of 23

21 (Distributed) ( Users) (2) Intel Xeon Six Core 24GB (4) 450GB 15K RPM SAS RAID Configuration RAID 5 Optical DVD-ROM Power Redundant (2) Gigabit Ethernet Remote Management Remote Management Adapter Backup Cartridge or Tape (Distributed) ( Users) (2) Intel Xeon Six Core 32GB (2) 300GB 15K RPM SAS - OS RAID Configuration RAID 1 (6) 450GB 15K RPM SAS SQL TL s, BU s, Data RAID Configuration RAID 10 Optical DVD-ROM Power Redundant (2) Gigabit Ethernet Remote Management Remote Management Adapter Backup Cartridge or Tape (Distributed) ( Users) (2) Intel Xeon Six Core 48GB (2) 300GB 15K RPM SAS OS RAID Configuration RAID 1 (6) 450GB 15K RPM SAS SQL TL s, BU s, Data RAID Configuration RAID 10 Optical DVD-ROM Power Redundant (2) Gigabit Ethernet Remote Management Remote Management Adapter Backup Cartridge or Tape Version Page 21 of 23

22 Remote Desktop Services (25 Users Per) (1) Intel Xeon Quad Core 4GB (2) 146GB 15K RPM SAS RAID Configuration RAID 1 Optical DVD-ROM Power Redundant (2) Gigabit Ethernet Remote Management Remote Management Adapter Client Type Desktop (1) Intel Core 2 Duo Dual Core 4GB 160GB (1) Gigabit Ethernet Notebook (1) Intel Core i5 Dual Core 4GB 250GB (1) Gigabit Ethernet, (1) Wireless b/g/n Tablet (1) Intel Core i7 Dual Core 4GB 320GB (1) Gigabit Ethernet, (1) Wireless b/g/n Version Page 22 of 23

23 Client and Software Platforms Type Operating System Browser Platform Operating System Platform Operating System Browser Platform Application/Web Microsoft Windows 2003 R2 Std. Edt. SP2 (x86) Microsoft Windows 2003 R2 Ent. Edt. SP2 (x86) Microsoft Internet Explorer 7/8 (32-bit) Microsoft Windows 2008 R2 Std. Edt. (x64) Microsoft Windows 2008 R2 Ent. Edt. (x64) Microsoft SQL 2008 R2 Std. Edt. (x64) Microsoft SQL 2008 R2 Ent. Edt. (x64) Remote Desktop Services Microsoft Windows 2008 R2 Std. Edt. (x64) Microsoft Windows 2008 R2 Std. Edt. (x64) Microsoft Internet Explorer 7/8 (x64) Client Type Operating System Browser Platform Operating System Thick Client Microsoft Windows XP Professional SP3 (x86/x64) Microsoft Windows Vista Business SP2 (x86/x64) Microsoft Windows 7 Professional (x86/x64) Microsoft Internet Explorer 7/8 (x86/x64) Thin Client Microsoft Windows XP Professional SP3 (x86/x64) Microsoft Windows Vista Business SP2 (x86/x64) Microsoft Windows 7 Professional (x86/x64) Wyse ThinOS Microsoft Windows CE Linux Microsoft Windows XPe Microsoft Windows Embedded Standard 2009 Microsoft Windows Embedded Standard 7 Version Page 23 of 23