Difference between revisions of "HL7 FHIR security topics"
JohnMoehrke (talk | contribs) |
JohnMoehrke (talk | contribs) |
||
Line 21: | Line 21: | ||
== Agenda and Minutes== | == Agenda and Minutes== | ||
+ | * [[HL7 FHIR Security 2017-11-28]] | ||
* [[HL7 FHIR Security 2017-11-21]] | * [[HL7 FHIR Security 2017-11-21]] | ||
* [[HL7 FHIR Security 2017-11-14]] | * [[HL7 FHIR Security 2017-11-14]] |
Revision as of 16:18, 28 November 2017
Contents
- 1 Call Logistics
- 2 Scope: Develop and Maintain FHIR Security Resources
- 3 Agenda and Minutes
- 4 Export from Gforge Security Open
- 5 Provenance
- 6 AuditEvent
- 7 Security Pages
- 8 Signatures Datatype
- 9 Not Security WG, but are listed as interested party
- 10 Relation of Provenance and Audit Event, and Security Labels
Call Logistics
Weekly: Tuesday at 05:00 EST (2 PM PST) Web conference desktop and VOIP https://www.freeconferencecall.com/join/security36 Online Meeting ID: security36 Phone: +1 515-604-9567, Participant Code: 880898 Please be aware that teleconference meetings are recorded to assist with creating the meeting minutes
Scope: Develop and Maintain FHIR Security Resources
Project ID 1209
This project will identify and define resources, terminology, profiles, extensions as well as security label metadata necessary to support Healthcare Security and Privacy requirements.
These requirements include those identified by international domains as articulated in legislation, policy, related standards, and those documented in HL7 Privacy and Security related domain analysis, architectural frameworks, services, and functional models, and various v2, v3, CDA, and FHIR interchange specifications. Specifically, this includes the AuditEvent resource, Provenance resource, Signature datatype, assigned to Security by the FMG as well as profiles and implementation guides created against these resources.
The development and maintenance of these artifacts will be conducted in collaboration with other relevant domain work groups as outlined in the Security WG mission and charter.
The Security WG will develop guidance regarding use of HL7 Security Standards (e.g. Role and Attribute-based access controls and vocabularies. In addition, the Security WG will work with appropriate external standards organizations to develop appropriate guidance on the use of general purpose security technologies, such as user authentication and authorization, that would aid with the secure and privacy protecting use of FHIR; and guide the FHIR community on the appropriate use of these solutions through the security pages of the FHIR specification, assigned to Security WG by the FMG.
Agenda and Minutes
- HL7 FHIR Security 2017-11-28
- HL7 FHIR Security 2017-11-21
- HL7 FHIR Security 2017-11-14
- HL7 FHIR Security 2017-11-07
- HL7 FHIR Security 2017-10-31
- October 24, 2017 -- canceled due to John not being available
- October 17, 2017 -- canceled due to John not being available
- HL7 FHIR Security 2017-10-10
- HL7 FHIR Security 2017-10-03
- HL7 FHIR Security 2017-09-26
- September 19, 2017 -- canceled due to WGM
- September 12, 2017 -- canceled due to WGM
- September 5, 2017 -- canceled due to WGM
- HL7 FHIR Security 2017-08-29
- August 22, 2017 -- No quorum
- HL7 FHIR Security 2017-08-15
- August 8, 2017 -- canceled
- August 1, 2017 -- canceled
- HL7 FHIR Security 2017-07-25
- July 18, 2017 - canceled due to conflict with IHE face-to-face meeting
- HL7 FHIR Security 2017-07-11
- July 4, 2017 - canceled due to USA holiday
- HL7 FHIR Security 2017-06-27
- June 20, 2017 - canceled due to resource availability.
- HL7 FHIR Security 2017-06-13
- HL7 FHIR Security 2017-06-06
- May 30, 2017 -- canceled due to holiday
- HL7 FHIR Security 2017-05-23
- May 15, 2017 -- Canceled due to travel from Madrid
- May 8, 2017 -- Canceled due to Madrid HL7 WGM
- May 2, 2017 -- ????? Canceled due to travel to Madrid
- April 25, 2017 -- Canceled due to IHE face-to-face
- HL7 FHIR Security 2017-04-18
- HL7 FHIR Security 2017-04-11
- HL7 FHIR Security 2017-04-04
- HL7 FHIR Security 2017-03-28
- March 21, 2017 -- Canceled
- HL7 FHIR Security 2017-03-14
- February 21, 2017 - Canceled due to HIMSS
- HL7 FHIR Security 2017-02-14
- February 7, 2017 - Canceled due to IHE face-to-face meeting
- HL7 FHIR Security 2017-01-31
- HL7 FHIR Security 2017-01-24
- December 27, 2016 Canceled
- December 20, 2016 Canceled
- HL7 FHIR Security 2016-12-06
- HL7 FHIR Security 2016-11-29
- November 22, 2016 canceled
- November 15, 2016 canceled
- HL7 FHIR Security 2016-11-08
- HL7 FHIR Security 2016-11-01
- HL7 FHIR Security 2016-10-25
- HL7 FHIR Security 2016-10-18
- HL7 FHIR Security 2016-10-11
- HL7 FHIR Security 2016-10-04
- September 27, 2016 Canceled
- September 20, 2016 Canceled
- September 13, 2016 Canceled
- HL7 FHIR Security 2016-9-06
- HL7 FHIR Security 2016-8-30
- August 23, 2016 - Canceled
- August 16, 2016 - Canceled
- HL7 FHIR Security 2016-8-9
- August 2 2016 - Canceled
- July 26 2016 - Canceled
- HL7 FHIR Security 2016-7-19
- HL7 FHIR Security 2016-7-12
- July 5 2016 - Canceled
- HL7 FHIR Security 2016-6-28
- HL7 FHIR Security 2016-6-21
- HL7 FHIR Security 2016-6-14
- HL7 FHIR Security 2016-6-07
- HL7 FHIR Security 2016-5-31
- HL7 FHIR Security 2016-5-24
- HL7 FHIR Security 2016-5-3
- HL7 FHIR Security 2016-4-26
- HL7 FHIR Security 2016-4-19
- HL7 FHIR Security 2016-4-12
- HL7 FHIR Security 2016-4-5
- HL7 FHIR Security 2016-3-29
- HL7 FHIR Security 2016-3-22
- HL7 FHIR Security 2016-3-15
- HL7 FHIR Security 2016-3-8
- HL7 FHIR Security 2016-3-1
- HL7 FHIR Security 2016-2-23
- HL7 FHIR Security 2016-2-16
- HL7 FHIR Security 2016-2-02
- HL7 FHIR Security 2016-01-26
- HL7 FHIR Security 2016-01-05
- HL7 FHIR Security 2015-12-29
- HL7 FHIR Security 2015-12-22
- HL7 FHIR Security 2015-12-15
- HL7 FHIR Security 2015-12-08
- HL7 FHIR Security 2015-12-01
- HL7 FHIR Security 2015-11-24
- HL7 FHIR Security 2015-11-17
- HL7 FHIR Security 2015-11-10
Export from Gforge Security Open
FHIR disposition link on gForge for review/discussion (ongoing weekly agenda item)
John moved the items from November 3rd, 2015 gForge export and distributed them to the various parts: Provenance, AuditEvent, Security pages, and Signature.
Provenance
HL7 FHIR Provenance Resource Project Work
AuditEvent
HL7 FHIR AuditEvent Resource Project Work
Security Pages
- Security pages
- Including guidance on Authentication and Authorization
- Security Labels Page
- including meta tag use for security labels
- from GForge
Signatures Datatype
- Signature Data Type
- from GForge
Not Security WG, but are listed as interested party
- 5525 Consent Directive does not appear to be aligned with the 80% ()
Relation of Provenance and Audit Event, and Security Labels
- Who records Provenance vs AuditEvent; what are the various architectures. The important point is to assure that the architecture chosen doesn't miss information.
- Risks to Confidentiality, Integrity, and Availability.
- Role of W5
- Privacy Consent as a profile on Contract