This wiki has undergone a migration to Confluence found Here

HL7 FHIR Security 2017-07-25

From HL7Wiki
Jump to navigation Jump to search

Call Logistics

Weekly: Tuesday at 05:00 EST (2 PM PST)

Web conference desktop and VOIP 
Online Meeting ID: security36
Phone: +1 515-604-9567, Participant Code: 880898
 Please be aware that teleconference meetings are recorded to assist with creating the meeting minutes 

Back to HL7 FHIR security topics


Member Name Member Name Member Name
x John Moehrke Security Co-Chair x Kathleen Connor Security Co-Chair x Alexander Mense Security Co-chair
. Suzanne Gonzales-Webb CBCC Co-Chair . Johnathan ColemanCBCC Co-Chair . Mike Davis
. Reed Gelzer RM-ES Lead . Glen Marshal . Joe Lamy
. Diana Proud-Madruga x Rob Horn . Beth Pumo


Open Issues

Now to be worked on for STU4 (release 4):


  • 9167 AuditEvent+needs+to+make+more+obvious+how+to+record+a+break-glass+event (John Moehrke) Considered for Future Use
  • 10343 Three+additional+Signature.type+codes (Kathleen Connor) Considered for Future Use
  • 10580 How+should+test+data+be+identified%3F (John Moehrke) Considered for Future Use
  • 10581 something+should+be+said+about+de-identification (John Moehrke) Considered for Future Use
  • 12462 Security%2FPrivacy+Module+page+should+explain+W5+realty+that+provenance+elements+in+other+resources+vs+use+of+Provenance+as+a+resource (John Moehrke) Considered for Future Use
  • 12463 explain+relationship+between+Provenance+and+AuditEvent.+ (John Moehrke) Considered for Future Use
  • 10579 New+Security+and+Privacy+%22Module%22+page+needs+content (John Moehrke) None
  • 11071 Improve+security+label+guidance+-+2016-09+core+%2390 (Kathleen Connor) None
  • 12660 HCS+use+clarification (John Moehrke) None
  • 12941 Security+Role+vocabulary+should+include+ISO+21298 (John Moehrke) None
  • 13011 The+value+set+for+security-role-type+is+broken+for+Provenance (Lloyd McKenzie) None
  • 13013 Valueset+for+Provenance.activity+is+broken (Lloyd McKenzie) None
  • 13014 Provenance.agent.relatedAgentType+doesn%27t+make+sense (Lloyd McKenzie) None

Assigned to John

Assigned to Kathleen

  • 10343 Three+additional+Signature.type+codes (Kathleen Connor) Considered for Future Use
    • need to work with some organization (e.g. HL7) to create three new vocabulary values. These vocabulary values need to be defined as OID values, because they are used in external standards that have a data-type of OID (i.e. XML-Signature). So they can't be text vocabulary, and they need to be fully OID.

Narrative improvements


  • No Quorum - John, Kathleen, and Bob Thompson... Anonymous showed but never responded
  • Discussed use of Reference.Identifier -- likely need to simplify Provenance and AuditEvent
  • Discussed use of Provenance to record when a service has confirmed profile tags in a resource.
    • Use Provenance.activity --> 'label'