Imprivata Virtual Smartcard Accreditation with NHS Digital

NHS Digital confirms that Imprivata Virtual Smartcard can be used for authentication to NHS systems

The coronavirus pandemic has driven unprecedented adoption of technology in the NHS and changed the way services are delivered at an incredible pace. With healthcare providers embracing new technologies and new ways of working, securing digital identities is more important than ever before. As a market leader in trusted digital identity management, we are committed to enabling digital transformation both locally and nationally by providing solutions that solve highly complex clinical workflows, security and compliance challenges.

NHS Digital have recently updated the assurance status of the Imprivata® OneSign Spine Combined Workflow Plus, this includes the Imprivata Virtual Smartcard. Please see a screenshot of the announcement below:

Imprivata virtual smartcard

NHS Digital and Imprivata® have been working together to agree the design and implementation for the Imprivata OneSign Spine Combined Workflow Plus solution that meets all of NHS Digital’s requirements. This solution includes Imprivata’s virtual smartcard.

The enhanced product, using versions of the software outlined below, has now been through that review process - our cyber security team has confirmed the design of the solution can be used for authentication (authentication to systems only). The only approved versions of the software that meet the approved design are those outlined below.

The product, utilising the versions of the software outlined below, is now moving into a pilot. Further updates to the product will follow after the pilot has completed.

Source: NHS Digital Website

For the full details of the assurance status and versions of the software please visit the NHS Digital website:

If you are interested in learning more about leveraging this technology, please contact Andrew Harrison, Principal Product Manager, Imprivata via email:

About Imprivata Virtual Smartcard

Imprivata Virtual Smartcard will provide fast, secure No Click Access® to NHS Spine-enabled applications without the need for physical cards. The new solution will improve security by eliminating smartcard workarounds and will support compliance with NHS information governance standards. Imprivata virtual smartcard removes the need for clinicians to remember login details, saving time throughout the day as they access the NHS Spine, allowing greater focus on delivering patient care.

Imprivata OneSign Spine Combined Workflow Plus supports NHS Spine session roaming which enables clinicians to move from location to location, patient to patient, accessing clinical information on whichever device or computer is to hand.

With no printing required, the virtual smartcards can be created and deployed to users at scale, facilitating efficient, secure, compliant access without the need for expensive hardware. Imprivata OneSign Spine Combined Workflow Plus supports role-based identities, enabling users to swiftly switch roles for varying clinical functions, while providing an audit-trail and compliance with the NHS Data Security Protection Toolkit, and EU General Data Protection Regulation (GDPR).

Imprivata OneSign Spine Combined Workflow Plus provides the following benefits to NHS Trusts:

  • Streamlines clinical workflows and simplifies NHS Spine access, thereby ensuring strong user adoption
  • Increased clinician productivity with No Click Access saves up to 25 seconds per login for improved focus on patient care
  • Fast access to secure patient data encourages adherence to secure working practices while secure walk-away features protect un-attended workstations
  • Compliance and information governance proven by accurate reporting on authentication and smartcard usage
  • Application integration with leading EHRs and most specialised clinical applications

Imprivata Virtual Smartcard is part of the Imprivata OneSign family which includes; Imprivata Confirm ID – for comprehensive identity and multifactor authentication for remote access, and clinical workflows; Imprivata Mobile Access – for mobile authentication that can be used with shared medical devices and applications, and; Imprivata Medical Device Access – for fast, secure authentication of medical devices.

For more details please visit: