Skip to content | Skip to navigation
Medicare Australia - Australian Government
What's new?

Take our website survey

PKI Frequently Asked Questions (FAQs)

In addition to the above, eCertificates has developed a comprehensive Support ToolkitExternal link to assist existing and potential certificate subscriber to:

  • Decide whether they need a certificate
  • Determine which type of certificate
  • Correctly apply for a certificate
  • Successfully complete the installation process
  • Quickly solve any problems along the way

What is PKI?

Public Key Infrastructure (PKI) is a combination of policies, procedures and technology allowing you to transfer information and images between computers safely and securely. Medicare Australia is helping to lead the way in using PKI in the health sector.

What does PKI do?

With PKI, you can securely send a file to someone, and know he or she is the only one who can open it. You can also receive a file, confident it has been sent to you securely.

Why should I use PKI?

The main benefit is allowing you to send and receive health information securely and privately. With PKI, you know for sure:

  • Who sent the message (authentication);
  • That the content hasn't changed between sender and receiver (integrity)
  • That the sender stands behind the message (non-repudiation);
  • And that only you, as the intended receiver, can open the message.

Is PKI compulsory?

Within Medicare Australia, it may be compulsory depending on the health programs (eg: Online Claiming). This is a business decision for the health care providers.

How will Medicare Australia use PKI?

Medicare Australia is keen to facilitate quicker communication between everyone in the health sector. We'll be using it, increasingly, so you can do more and more business online securely, if you choose to. Also, PKI enables secure online communications between Medicare Australia and GPs, hospitals, pharmacies and others in the health sector.

How do I register for PKI?

There is an Australian PKI-registration authority, called the eCertificates. eCertificates performs user identity checks before registering applicants for issue of Digital Certificates that allow secure online communications.

Individuals (such as doctors) or locations (such as a particular hospital or the building where a group of doctors practice) can apply for registration by providing a range of information and details.

Once registered, you receive a personal identification code (PIC) protected token, which contains the digital keys and certificates that allow you to 'sign' and 'encrypt' electronic transactions.

What are Digital Certificates?

Digital certificates are electronic 'letters of introduction'. This gives confidence - electronically - that you are who you say you are. You can electronically 'sign' documents, linking your PKI identity and that document securely. In reverse, you can have confidence in a PKI-secured document sent to you. For additional security, you use a personal identification code (PIC) or Pass-Phrase to make sure access to you own computer system remains secure.

What types of Digital Certificates are there?

eCertificates issues two types: an Individual Certificate, which is like an individual, handwritten signature; and a Location Certificate, which can be used on behalf of an organisation.

What type of computer is needed to be part of the PKI system?

The recommended level of system requirements for a computer is:

  • Pentium II processor or better
  • 512 MB RAM
  • 50 MB spare on Hard Drive
  • 3.5" floppy disk and CD-ROM drives
  • Windows 2000 or XP operating systems
  • Spare USB port and/or serial port
  • Internet connection and email account
  • Linux or Macintosh OS 10 Operating Systems

Can I communicate online with other health care providers without PKI?

Yes, you can. However, there is no guarantee that the transferred information will not be corrupted, intercepted or forged or even that it is from the person it claims to be from. Therefore, it is best to apply some form of information security management protocols to secure your information either using PKI or other technology. Some online transactions, such as with Online Claiming, can only be carried out using PKI.

Can PKI effectively protect my financial and medical data kept in my surgery?

There is no one effective method that can protect your financial and medical data. All health care providers should take a holistic approach in managing their information security (including physical security). See Australia StandardExternal link HB 174 - 2003 Information Security Management Implementation Guide for the Health Sector.

Is PKI free?

Medicare Australia is currently sponsoring free PKI for all health care providers (including allied health practitioners such as physiotherapists and chiropractors, but excluding alternative care practitioners). Digital certificates for health care locations are currently free (one per health care location).

Who should I talk to if I need more information?

If you would like to contribute a question, please email us at pki@medicareaustralia.gov.auEmail and include 'PKI FAQ' in the subject heading.

For other information about PKI, please contact:

eBusiness Service Centre
Phone: 1800 700 199 and select option 3
Email: pki@medicareaustralia.gov.auEmail or registration@medicareaustralia.gov.auEmail
TTY: 1800 552 152

Last updated: 31 October, 2008

back to top