This wiki has undergone a migration to Confluence found Here
Difference between revisions of "HL7 WGM January 2017 - San Antonio, Texas USA Minutes"
Jump to navigation
Jump to search
(→WED JAN 18 Q3 FHIR Security, Privacy, Consent, Trust, Provenance and AuditEvent Module Development) |
|||
(17 intermediate revisions by the same user not shown) | |||
Line 4: | Line 4: | ||
[http://www.hl7.org/documentcenter/public_temp_947956C0-1C23-BA17-0C5C7D5B421E3A70/calendarofevents/SanAntonio_Onsite_web.pdf San Antonio On-Site Guide] | [http://www.hl7.org/documentcenter/public_temp_947956C0-1C23-BA17-0C5C7D5B421E3A70/calendarofevents/SanAntonio_Onsite_web.pdf San Antonio On-Site Guide] | ||
+ | |||
+ | [http://wiki.hl7.org/index.php?title=HL7_WGM_JANUARY_2017_-_San_Antonio,_Texas_USA Security WGM Agenda] | ||
[[Security|Back to Security Main Page]] | [[Security|Back to Security Main Page]] | ||
==Security WGM Minutes== | ==Security WGM Minutes== | ||
− | [ | + | [http://gforge.hl7.org/gf/project/security/docman/HL7%20Security%20WG%20Administrative%20Documents/Security%20Admin%20WGM%20Minutes/HL7%20Jan%202017%20WGM%20San%20Antonio/Security%20Jan%202017%20San%20Antonio%20WGM%20Attendee%20List.xlsx Jan 2017 Security Attendee Spreadsheet] |
[http://www.hl7.org/documentcenter/public/wg/secure/minutes/2016-09-22_SEC_WGM_Minutes.rtf September 2016 Baltimore WGM - Security] | [http://www.hl7.org/documentcenter/public/wg/secure/minutes/2016-09-22_SEC_WGM_Minutes.rtf September 2016 Baltimore WGM - Security] | ||
Line 15: | Line 17: | ||
− | '''JAN 16 MON Q3 Joint CBCC - Security''' | + | =='''JAN 16 MON Q3 Joint CBCC - Security'''== |
* ''[http://wiki.hl7.org/index.php?title=January_2017_CBCC_Working_Group_Meeting_-_San_Antonio,_Texas See CBCC WGM Minutes]'' | * ''[http://wiki.hl7.org/index.php?title=January_2017_CBCC_Working_Group_Meeting_-_San_Antonio,_Texas See CBCC WGM Minutes]'' | ||
Line 22: | Line 24: | ||
− | '''JAN 17 TUE Q1 Opening Security WG Meeting''' | + | =='''JAN 17 TUE Q1 Opening Security WG Meeting'''== |
* Introductions | * Introductions | ||
* Approval of agenda | * Approval of agenda | ||
Line 36: | Line 38: | ||
− | '''JAN 17 TUE Q2 Joint Security and CBCC WG Meeting''' | + | =='''JAN 17 TUE Q2 Joint Security and CBCC WG Meeting'''== |
'''[http://gforge.hl7.org/gf/download/docmanfileversion/9511/15017/TF4FA%20v2%20IOANA.docx TF4FA Behavioral Model Elaboration]''' - Ioana Singureanu | '''[http://gforge.hl7.org/gf/download/docmanfileversion/9511/15017/TF4FA%20v2%20IOANA.docx TF4FA Behavioral Model Elaboration]''' - Ioana Singureanu | ||
* [https://global.gotomeeting.com/join/944444429 GoTo Meeting Link] | * [https://global.gotomeeting.com/join/944444429 GoTo Meeting Link] | ||
Line 44: | Line 46: | ||
− | '''JAN 17 TUE Q3 Security joint with CBCC Project Meeting with mHealth WG''' | + | =='''JAN 17 TUE Q3 Security joint with CBCC Project Meeting with mHealth WG'''== |
* Screen Share https://join.me/123-987-469 | * Screen Share https://join.me/123-987-469 | ||
*Defining Security and Privacy requirements in Consumer Mobile Health Application Functional Framework (cMHAFF) | *Defining Security and Privacy requirements in Consumer Mobile Health Application Functional Framework (cMHAFF) | ||
Line 52: | Line 54: | ||
*Discussion on the [https://www.federalregister.gov/documents/2016/12/14/2016-29718/requirements-and-registrations-privacy-policy-snapshot-challenge ONC Privacy Policy Snapshot Challenge] to create a user-friendly "snapshot" of a product's privacy practices. | *Discussion on the [https://www.federalregister.gov/documents/2016/12/14/2016-29718/requirements-and-registrations-privacy-policy-snapshot-challenge ONC Privacy Policy Snapshot Challenge] to create a user-friendly "snapshot" of a product's privacy practices. | ||
+ | ==JAN 17 TUE Q4 '''CBCC FHIR-I Joint on FHIR Consent Resource'''== | ||
+ | See CBCC Minutes | ||
− | + | ==WED JAN 18 Q1 '''Joint w/ EHR, CBCC, FHIR, SOA, Security'''== | |
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
Proposed Topics: | Proposed Topics: | ||
*VA Cascading OAuth Server Connectathon report out - Duane Decouteau and Mohammad Jafari | *VA Cascading OAuth Server Connectathon report out - Duane Decouteau and Mohammad Jafari | ||
*Lifecycle Vocabulary Discussion - Harmonization of HL7 and ISO concepts - Mike Davis and Reed Gelzer | *Lifecycle Vocabulary Discussion - Harmonization of HL7 and ISO concepts - Mike Davis and Reed Gelzer | ||
+ | *Kathleen reported that the Lifecycle vocabulary has been added to the FHIR Activity Value Set | ||
*[http://gforge.hl7.org/gf/download/docmanfileversion/9486/14987/2016DEC_PSS_SecurityLabelingSvc.doc PASS Security Labeling Service v-next] - Diana Proud-Madruga | *[http://gforge.hl7.org/gf/download/docmanfileversion/9486/14987/2016DEC_PSS_SecurityLabelingSvc.doc PASS Security Labeling Service v-next] - Diana Proud-Madruga | ||
− | + | ||
− | + | ==WED JAN 18 Q2 '''Joint w/SOA'''== | |
− | + | •PASS Audit Ballot Reconciliation Proposed Disposition Review – See PASS Audit Reconciliation Spreadsheet, which has not been posted at this time. | |
− | + | ||
− | + | ==WED JAN 18 Q3 '''FHIR Security, Privacy, Consent, Trust, Provenance and AuditEvent Module Development'''== | |
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
* Priority is FHIR Consent | * Priority is FHIR Consent | ||
* Security topics | * Security topics | ||
Line 87: | Line 75: | ||
*** OpenID Connect, Resource Server Access Control, Patient Consent AS | *** OpenID Connect, Resource Server Access Control, Patient Consent AS | ||
*** FHIR Scopes | *** FHIR Scopes | ||
− | * | + | * [https://docs.google.com/document/d/1d7mJLWq5B6nYumRaMy8WxiRciGpJ8sng3ucJOtHEoQk/edit# SMART PSS] |
− | + | ||
− | + | ==WED JAN 18 Q4 '''Security WG Project Meeting'''== | |
− | + | *Continuation of TF4FA Ballot Reconciliation | |
− | |||
− | |||
− | *Continuation of | ||
*Discussion of proposed enhancements to TF4TA Trust Services Model to address ballot comments. | *Discussion of proposed enhancements to TF4TA Trust Services Model to address ballot comments. | ||
− | + | *See [http://gforge.hl7.org/gf/project/security/docman/HL7%20Security%20SOA/PSAF/PSAF%20TF4FA%20Model%20Diagrams/PSAF%20Jan%202017%20Ballot/V3_PSAF_R1_I1_2017JAN_amalgamated.xls TF4FA Ballot Reconciliation Spreadsheet] for dispositions on Bernd and Alex Comment Blocks. | |
− | + | ||
− | + | ==THU JAN 19 Q1 '''Security Joint with FHIR-I'''== | |
− | |||
− | |||
*Discussion of STU3 Ballot for Provenance and AuditEvent | *Discussion of STU3 Ballot for Provenance and AuditEvent | ||
*Report out on Security and CBCC Module Page updates | *Report out on Security and CBCC Module Page updates | ||
− | + | ||
− | + | ==THU JAN 19 Q2 '''Security WG Project Meeting'''== | |
− | |||
− | |||
− | |||
− | |||
*Security WG "Housekeeping" | *Security WG "Housekeeping" | ||
− | **WG Health Review | + | **WG Health Review - continue good work - ensure that all SSD requirements are met. |
− | **Review and Update to Governance Documents | + | **Review and Update to Governance Documents - nothing to update at this meeting, but need to prep review for May meeting. |
− | **WGM Minutes | + | **WGM Minutes - prepare draft |
− | + | ||
− | + | ==THU JAN 19 Q3 '''Security WG Project Meeting'''== | |
− | + | *FHIR Documentation Writing Session - minimal attendance so deferred to interim Security FHIR Sub-WG calls. | |
− | |||
− | *FHIR Documentation Writing Session | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
[[Security|Back to Security Wiki Meetings]] | [[Security|Back to Security Wiki Meetings]] | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− |
Latest revision as of 05:29, 31 March 2017
Working Group Meeting Brochure
Contents
- 1 Security WGM Minutes
- 2 JAN 16 MON Q3 Joint CBCC - Security
- 3 JAN 17 TUE Q1 Opening Security WG Meeting
- 4 JAN 17 TUE Q2 Joint Security and CBCC WG Meeting
- 5 JAN 17 TUE Q3 Security joint with CBCC Project Meeting with mHealth WG
- 6 JAN 17 TUE Q4 CBCC FHIR-I Joint on FHIR Consent Resource
- 7 WED JAN 18 Q1 Joint w/ EHR, CBCC, FHIR, SOA, Security
- 8 WED JAN 18 Q2 Joint w/SOA
- 9 WED JAN 18 Q3 FHIR Security, Privacy, Consent, Trust, Provenance and AuditEvent Module Development
- 10 WED JAN 18 Q4 Security WG Project Meeting
- 11 THU JAN 19 Q1 Security Joint with FHIR-I
- 12 THU JAN 19 Q2 Security WG Project Meeting
- 13 THU JAN 19 Q3 Security WG Project Meeting
Security WGM Minutes
Jan 2017 Security Attendee Spreadsheet
September 2016 Baltimore WGM - Security
JAN 16 MON Q3 Joint CBCC - Security
JAN 16 MON Q4 Joint with CBCC – New discussion items and projects
JAN 17 TUE Q1 Opening Security WG Meeting
- Introductions
- Approval of agenda
- Next WGM attendance ?
- International Report outs
- Liaison Reports: ISO, IHE, ONC (HEART)
- HL7 Project status and updates:
- TF4FA Ballot outcome report out
- PASS Audit Ballot outcome report out
- PASS SLS report out
- FHIR Security - AuditEvent, Provenance, Security Labels
- FHIR Consent Directive work (with CBCC)
JAN 17 TUE Q2 Joint Security and CBCC WG Meeting
TF4FA Behavioral Model Elaboration - Ioana Singureanu
- GoTo Meeting Link
- Dial-in: United States +1 (872) 240-3212 / Access Code: 944-444-429
Trust Framework for Federated Authorization Ballot Reconciliation
- Review proposed dispositions
JAN 17 TUE Q3 Security joint with CBCC Project Meeting with mHealth WG
- Screen Share https://join.me/123-987-469
- Defining Security and Privacy requirements in Consumer Mobile Health Application Functional Framework (cMHAFF)
- Discussion on the ONC Privacy Policy Snapshot Challenge to create a user-friendly "snapshot" of a product's privacy practices.
JAN 17 TUE Q4 CBCC FHIR-I Joint on FHIR Consent Resource
See CBCC Minutes
WED JAN 18 Q1 Joint w/ EHR, CBCC, FHIR, SOA, Security
Proposed Topics:
- VA Cascading OAuth Server Connectathon report out - Duane Decouteau and Mohammad Jafari
- Lifecycle Vocabulary Discussion - Harmonization of HL7 and ISO concepts - Mike Davis and Reed Gelzer
- Kathleen reported that the Lifecycle vocabulary has been added to the FHIR Activity Value Set
- PASS Security Labeling Service v-next - Diana Proud-Madruga
WED JAN 18 Q2 Joint w/SOA
•PASS Audit Ballot Reconciliation Proposed Disposition Review – See PASS Audit Reconciliation Spreadsheet, which has not been posted at this time.
WED JAN 18 Q3 FHIR Security, Privacy, Consent, Trust, Provenance and AuditEvent Module Development
- Priority is FHIR Consent
- Security topics
- CPs have a plan, but require time to develop text to vote on
- Should we start projects on reasonable deployment models like SMART, and Duane's cascaded OAuth?
- Client App to Server, Patient vs Provider vs Research, Server to Server,
- OpenID Connect, Resource Server Access Control, Patient Consent AS
- FHIR Scopes
- SMART PSS
WED JAN 18 Q4 Security WG Project Meeting
- Continuation of TF4FA Ballot Reconciliation
- Discussion of proposed enhancements to TF4TA Trust Services Model to address ballot comments.
- See TF4FA Ballot Reconciliation Spreadsheet for dispositions on Bernd and Alex Comment Blocks.
THU JAN 19 Q1 Security Joint with FHIR-I
- Discussion of STU3 Ballot for Provenance and AuditEvent
- Report out on Security and CBCC Module Page updates
THU JAN 19 Q2 Security WG Project Meeting
- Security WG "Housekeeping"
- WG Health Review - continue good work - ensure that all SSD requirements are met.
- Review and Update to Governance Documents - nothing to update at this meeting, but need to prep review for May meeting.
- WGM Minutes - prepare draft
THU JAN 19 Q3 Security WG Project Meeting
- FHIR Documentation Writing Session - minimal attendance so deferred to interim Security FHIR Sub-WG calls.