HL7 FHIR Security 2018-04-03

Call Logistics

Weekly: Tuesday at 02:00 EST

Web conference desktop and VOIP https://www.freeconferencecall.com/join/security36 
Online Meeting ID: security36
Phone: +1 515-604-9567, Participant Code: 880898
 Please be aware that teleconference meetings are recorded to assist with creating the meeting minutes 

Back to HL7 FHIR security topics

Attendees

	Member Name			Member Name			Member Name
x	John Moehrke Security Co-Chair		x	Kathleen Connor Security Co-Chair		.	Alexander Mense Security Co-chair
x	Suzanne Gonzales-Webb CBCC Co-Chair		.	Mike Davis		x	Joe Lamy AEGIS
x	Ali Massihi		.	Johnathan Coleman CBCC co-chair		x	Nathan Botts Mobile co-chair
.	Diana Proud-Madruga		.	Rob Horn		.	Beth Pumo
.	Irina Connelly		.	Mario Hyland AEGIS		.	Mark Underwood NIST
.	Peter Bachman		.	Grahame Greve FHIR Program Director		x	Kevin Shekleton (Cerner, CDS Hooks)
x	Luis Maas EMR Direct		x	Dave Silver		x	Francisco Jauregui

Agenda

• Roll;
• approval of agenda
• approval of HL7 FHIR Security 2018-03-20 and HL7 FHIR Security 2018-03-27 Minutes
• Anouncements
  • Note new time at 2:00 Eastern Time every Tuesday (just prior to full Security WG meeting)
  • Created new stream for Security and Privacy discussions. Specification development, and Implementation.
    • https://chat.fhir.org/#narrow/stream/Security.20and.20Privacy
  • Grahame created a new stream for Patient Empowerment. Discussions about empowering patients. Focus on deployment and advocacy.
    • https://chat.fhir.org/#narrow/stream/patient.20empowerment
  • Proposed FHIR Connectathon track for Cologne -- GDPR
    • Alex has agreed to be a SME. John to support.
    • Rene has agreed to help out.
    • http://wiki.hl7.org/index.php?title=201805_GDPR
  • Blockchain FHIR Connectathon
    • Grahame is trying to find a community wanting to 'play' with blockchain. He is willing to standup the infrastructure.
    • See blockchain zulip stream https://chat.fhir.org/#narrow/stream/blockchain
• Johnathan specific guidance given a paper from ONC that might guide improvements to the security guidance
  • Johnathan sends his regrets... again...
  • KEY PRIVACY AND SECURITY CONSIDERATIONS FOR HEALTHCARE APPLICATION PROGRAMMING INTERFACES (APIS)
• All security open http://gforge.hl7.org/gf/project/fhir/tracker/?action=TrackerItemBrowse&tracker_id=677&tracker_query_id=4967
• Improvement beyond SMART scopes
  • Zulip chat https://chat.fhir.org/#narrow/stream/Security.20and.20Privacy/subject/Improvement.20beyond.20SMART.20scopes
• Patient Directed backend communication
  • Zulip chat https://chat.fhir.org/#narrow/stream/Security.20and.20Privacy/subject/Patient.20directed.20backend.20communication
• Oauth App Registration
  • Zulip chat https://chat.fhir.org/#narrow/stream/Security.20and.20Privacy/subject/OAuth.20App.20Registration
• Certificate Management
  • Zulip chat https://chat.fhir.org/#narrow/stream/Security.20and.20Privacy/subject/Do.20we.20need.20to.20say.20anything.20about.20Certificate.20Management
• New business