This wiki has undergone a migration to Confluence found Here
<meta name="googlebot" content="noindex">

HL7 FHIR Security 2016-7-12

From HL7Wiki
Jump to navigation Jump to search

Call Logistics

Weekly: Tuesday at 05:00 EST (2 PM PST)

Conference Audio: 770-657-9270,' Access: 845692
Join online meeting:  
 Please be aware that teleconference meetings are recorded to assist with creating the meeting minutes 

Back to HL7 FHIR security topics


Member Name Member Name Member Name
x John Moehrke Security Co-Chair x Kathleen Connor Security Co-Chair x Suzanne Gonzales-Webb CBCC Co-Chair
x Gary Dickinson EHR Co-Chair . Johnathan ColemanCBCC Co-Chair . Mike Davis
. Reed Gelzer RM-ES Lead x Glen Marshal . Galen Mulrooney
. Dave Silver x Rob Horn . Judy Fincher
x Diana Proud-Madruga . Beth Pumo Oliver Lawless
. Bob Dieterle . Mario Hyland x Joe Lamy
. Rick Grow . [mailto: Richard Etterma] . [mailto: Wayne Kubic]


  • Roll;
  • approval of agenda
  • approval of the June 28, 2016 minutes
  • FHIR timeline to ballot
  • Update on action items
  • 3318 -- assigned to Rick to work with Mike -- following the discussion in the CP
    • 3318 Clarify how to use RBAC and ABAC using FHIR ()
  • 9564 -- assigned to John -- following the discussion in the CP
    • 9564 Should FHIR AuditEvent resource include DICOM extension of ATNA Audit log message ? ()
  • 7568 -- assigned to Kathleen, seems this should be satisfid by 9840? -- following the discussion in the CP
    • 7568 2015May core #859 - How are agent and activity linked? ()
  • 9042, 9043, 9052 -- assigned to Kathleen, she has the XML almost ready to go
    • 9042 Add RBAC as value set for AuditEvent.participant.role ()
    • 9043 Add ABAC as alternative value set for AuditEvent.participant.role ()
    • 9052 Add SNOMED Stuctural Roles as value set for AuditEvent.participant.role ()
  • 9167 -- assigned to John, only creating an example AuditEvent -- following the discussion in the CP
    • 9167 AuditEvent needs to make more obvious how to record a break-glass event ()
  • 9996 -- assigned to Glen -- following the discussion in the CP
    • 9996 Using Provenance resource to annotate content derived from non-FHIR sources ()
  • FMM evaluation vs desire - We picked 4 last week -- We might want to re-evaluate to level 3. As level 4 means we would need to work hard to get "complete" testing tools and procedures at 100% of functionality. I think we should only target getting some testing ready.
  • Discussion with Mario on getting prepared for next connectathon
    • What use-case should we focus on? (Lab vs Financial vs Patient)
  • Discussion around Record Lifecycle events (6303)? Are we going to support this? Are the vocabulary done yet? (Gary will join)
    • 6303 Add Record Lifecycle Events to AuditEventObjectLifecycle Set (Gary Dickinson) None
  • How should 'test-data' be identified? Is this a legitimate use of security-tags?
  • De-Identification topics

Prepare for a block vote for next week --

    • 9563 Add onBehalfOf to Signature datatype ()