Patient verification levels and proving identity

Patients with a valid ID can prove their identity through a face scan or video identification:

For video identification, the patient:

1. submits a valid form of Photo ID and enters their NHS number
2. completes a face scan or submits a video of them saying/signing four specific numbers depending on the device they use
3. receives an email to let them know verification is taking place

NHS login will check on the Patient Demographic Service (PDS) to see if the information matches to what has been submitted by the patient.

If the patient has successfully been verified, they will receive email confirmation. If they have failed the verification check, they will receive an email stating the reason they were not verified.

If a patient has already used NHS login for GP online services, they can choose to transfer the previous ID check if they use the mobile number on their NHS record. The patient can then be verified through the central database without having to redo ID verification. Patients can only use this verification process once.

For the Central Database Route (or Identity Verification via Mobile - IDVM):

1. NHS login scans the GP's IT system
2. NHS login confirms whether a Linkage Key (EMIS/OPTUM) or Passphrase (TPP) exists
3. If it does not exist, NHS login can create one for the user
4. NHS login will complete some checks on the following:

• the patient has not started the Video Route or tried the Central Database Route before
• the patient has done their One-Time Password (OTP)
• the patient has a ODS code which is registered with the clinical supplier system
• the patient's number, provided during registration, matches the number held in PDS

If everything matches and is successful, NHS login will generate the patient a linkage key/passphrase and they will be verified successfully.

The PIN document route can be used for those without a Photo ID, or who those can’t take videos or use the central database route.

The GP surgery provide the linkage details in what is known as a Registration Detail or PIN document.

This contains an:

• Account ID - 10-15 characters in length 

• Linkage Key (EMIS/Optum) or a Passphrase (TPP) - 6-15 characters in length 

• ODS Code (the GP surgery’s unique identifier) 

When a GP surgery creates a patient's online account, they can verify their identity and can then generate a PIN document from their system.

It is presumed that, in line with the surgery's policy, they will have taken steps when initially onboarding a patient to verify their identity.

Optum (formerly EMIS) systems sometimes generate short account IDs and linkage keys, please check this when printing or emailing a PIN document.

In the NHS App, the patient then:

1. Selects How to prove who you are without Photo ID.

2. Responds Yes when asked if they use their GP surgery's online services. 

3. Selects Yes when asked if they have all 3 details.

4. Enters the ODS code, account ID and linkage key or passphrase from the PIN document.

5. Enters their name and date of birth when prompted, and submits their detail.