April 4, 2017 Security Conference Call

Back to Security Main Page

Attendees

x	Member Name		x	Member Name		x	Member Name		x	Member Name
.	John MoehrkeSecurity Co-chair		x	Kathleen ConnorSecurity Co-chair		.	Alexander Mense Security Co-chair		.	Trish WilliamsSecurity Co-chair
.	Mike Davis		x	Suzanne Gonzales-Webb		x	David Staggs		x	Mohammed Jafari
.	Glen Marshall, SRS		.	Beth Pumo		.	Ioana Singureanu		.	Rob Horn
.	Diana Proud-Madruga		.	Serafina Versaggi		.	Joe Lamy		.	Galen Mulrooney
.	Duane DeCouteau		.	Chris Clark		.	Johnathan Coleman		.	Aaron Seib
.	Ken Salyards		.	Christopher D Brown TX		.	Gary Dickinson		x	Dave Silver
.	Rick Grow		.	William Kinsley		.	Paul Knapp		x	Mayada Abdulmannan
.	Kamalini Vaidya		.	Bill Kleinebecker		.	Christopher Shawn		.	Grahame Grieve
x	Donna Boccamazzo		.	Ken Rubin		.	David Tao		.	Nathan Botts

Back to Security Main Page

Agenda

1. (2 min) Roll Call, Agenda Approval
2. (4 min) Review and Approval of Security WG Call Minutes March 28, 2017
3. (20 min) Madrid WGM Draft Agenda Review - Kathleen
4. (5 min) FHIR Security Call - Please review front matter - John Moehrke

Minutes

• Chaired by John Moehrke. Donna Boccamazzo, scribe.
• Agenda approved by consensus.
• March 28th call minutes reviewed and approved.

Madrid WGM Draft Agenda Review

• Kathleen presented draft Security agenda for Madrid.
• CBCC and Security to coordinate to meet with Bernd Blobel
• Copied agenda from San Antonio; may refine
• Tuesday Opening Session
  • Tues Q2: Trust framework as it’s the major work item for this working group meeting
  • Tues Q3 CBCC FHIR Joint on FHIR Consent Resource; may move
  • Tues Q2 or Q3: Potentially have Bernd present on items from EU, ISO and his comments on new trust framework ballot.
• Wednesday
  • Wed Q1: Joint w/ EHR, CBCC, FHIR, SOA, Security
  • Mario Hyland agreed to continue discussions, with Gary Dickinson, about creating a test suite for FHIR Privacy, Security, Provenance, and Digital Ledger Technology; has expectation that Security would bring test case; could work on during FHIR Security call
  • Josh Mandel project with Smart on FHIR - one approach to authorization using OAuth
  • Project pioneered by VA at Connectathon in January for cascading OAuth and continued to enhance for HIMSS; provides alternative especially for use cases involving patient right of access
  • Need to confirm with Gary from EHR. Have not discussed with CBCC FHIR or SOA. Need to confirm with David Pyke from CBCC.
  • Wed Q2: Joint w/ SOA; Kathleen will reach out to Ken Rubin to help set agenda
  • Wed Q4: Continue work on trust framework reconciliation or WG Health
• Thursday
  • Thurs Q1: Security Joint with FHIR-I
  • Thurs Q2 and Q3: interim planning; harmonization proposals
  • Alex to reach out to Josh to schedule a meeting. May need to reschedule other sessions.

Review of CBCC Madrid Agenda

• Monday Opening Session Q3/Q4 Joint with Security
  • Suzanne asked Kathleen to update the following:
    • New Joint Project Review
    • New Discussion Items
• Tuesday Q3
  • Perhaps use to meet with David and Nathan if Bernd does not use this session
  • Perhaps meet with Andy Stechishin re Mobile Apps to explain differences in platforms and business models as they will drive policies surrounding functional requirements for privacy and security
  • Kathleen to add as possible agenda item (Per Suzanne, joint sessions are based off invitations received; schedule for Joint Security and Mobile Health is firm but discussion is flexible.) Kathleen to email co-chairs to garner interest.
• Tuesday Q4 Joint with FHIR - per Suzanne, no ballot reconciliation; discussion regarding STU3 vs STU4
• Reminders for today’s FHIR Security call: please review front matter.

Call Ended.