August 19, 2014 Security WG Conference Call

Meeting Information

Back to Security Main Page

Attendees

x	Member Name		x	Member Name		x	Member Name		x	Member Name
x	Mike DavisSecurity Co-chair		x	John MoehrkeSecurity Co-chair		.	Trish WilliamsSecurity Co-chair		.	Bernd BlobelSecurity Co-chair
.	Chris Clark		.	Johnathan ColemanCBCC Co-Chair		x	Kathleen Connor		x	Duane DeCouteau
.	Reed Gelzer		X	Suzanne Gonzales-WebbCBCC Co-chair		x	Rick Grow		x	David Henkel
.	Mohammed Jafari		.	Don Jorgenson		.	Alexander Mense		.	Amanda Nash
.	Paul PetronelliMobile Health Security Co-chair		x	Diana Proud-Madruga		.	Harry Rhodes		.	Aaron Seib
.	Ioana Singureanu		.	Walter Suarez		x	Tony Weida		.	Paul PetronellimHealth Co-chair
.	Julia Chan		.	Steve Hufnagel		.	Gary Dickinson		.	Tim McKay

Back to Security Main Page

Agenda

1. (05 min) Roll Call, August 12 Meeting Minutes
2. (10 min) September WGM Agenda
3. (10 min) PSS Patient Friendly Natural Language update
4. (10 min) FHIR disposition - review/discussion, ongoing agenda item
5. (05 min) Other business, action items, and adjournment

Meeting Minutes

August 12 Meeting minutes for August 12 unanimously approved. No additional agenda items added.

September 2014 WGM Agenda Updates made directly to: September WGM Agenda

• Attendees decided to assign discussion on the 3 Secure RESTful Interface Profiles for OAuth 2/OpenID Connect to quarters 2 and 3 on Tuesday, and Galen/Kathleen's draft presentation on the S&P DAM update and migration to a Conceptual Info Model for the HL7 Security SOA project to quarter 3 on Wednesday.

• Quarter 3 on Tuesday will also contain a discussion on a possible Healthcare UMA profile and its impact on FHIR work.

• Duane intends to present a coded example for the FHIR-SOA Case Study Forum, provided that the WG concurs. This presentation could fit into the afternoon session on Wednesday.

• Kathleen suggested that the WG hold a working session to show what the first run of a security label resource might look like, following the observation resource.

• John suggested that we have an answer on the progress of the gForge items during the FHIR Resource Work Session during quarter 1 on Thursday.

FHIR Security Labeling Issues 8/21

• John responded to page 3 of Kathleen's presentation.
  • John's comment: "The way that security tags are applied today, any resource can be tagged itself and there is a rollup tag mechanism at the bundle level, and for any tags that are on a resource that’s in a bundle, the tags are still carried by that resource. So, there isn’t a problem with protection of the tags or the fidelity of the tagging. The issue around persistence is no better if you put it in the resource than if you leave it out of the resource as it is today. We need to be very clear that when someone saves a resource, they are expecting to save the security tag. The piece that is most concerning is how does one track the changes of security tags over time since there is no versioning support on security tags? I’m not clear on what the problem is we’re trying to solve."

• There may be more discussion on this issue next week.

Meeting Adjourned at 1503 PDT

Additional minutes provided by --Rgrow (talk) 20:37, 22 August 2014 (UTC)

Back to Security Main Page