September 29, 2015 Security WG Conference Call

Attendees

x	Member Name		x	Member Name		x	Member Name
x	Mike DavisSecurity Co-chair			Duane DeCouteau		.	Chris Clark
x	John MoehrkeSecurity Co-chair (audio only)			Johnathan Coleman		.	Aaron Seib
x	Alexander Mense Security Co-chair		.	Ken Salyards			Christopher D Brown TX
.	Trish WilliamsSecurity Co-chair		.	Gary Dickinson			Dave Silver
x	Kathleen Connor		.	Ioana Singureanu			Mohammed Jafari
x	Suzanne Gonzales-Webb			Rob Horn		.	Galen Mulrooney
x	Diana Proud-Madruga			Ken Rubin			William Kinsley
x	Rick Grow			[mailto: Paul Knapp]		x	Glen Marshall, SRS
.	Debbie Bucci		.	Bill Kleinebecker			Chris Shawn
	Oliver Lawless			Rob Horn			Serafina Versaggi

Back to Security Main Page

Agenda DRAFT

1. ( 5 min) Roll Call, Agenda Approval
2. ( 5 min) Approve September 22 Meeting Minutes
3. ( 5 min) PASS Access Control Conceptual Model (SOA) Update - Diana, Don Jorgenson, Mike, Dave
4. ( 5 min) Joint Vocabulary Alignment Update - Diana
5. ( 35 min) FHIR Security report out - John/Lloyd/Kathleen
   • FHIR ProvenanceEvent Value Set - Kathleen
6. ( 5 min) PSAF Update - Kathleen

Meeting Minutes DRAFT

Approval of September 22 meeting minutes Diana/Glen 0 Opposed/Abstain; 7 approved

PASS Access Control Conceptual Model (SOA) Update some negative ballot comments received which will be resolved ballot did not pass, quorum was achieved (24 need for affirmative ballot) reconciliation will begin at WGM, including discussion; time will be allotted at WGM

• four ballot reconciliation sheets returned
  • Bernd Blobel
  • VA via Greg Staudenmaier
  • DoD via Krystol Shaw
  • Lorraine Doo, HHS
• John has been assigned to follow up with Keith Boone regarding negative vote

Joint Vocabulary Alignment Update several definitions have been submitted for the group to review (avoiding the detailed semantics); currently at 80% definitions submitted for the ISO 21089

• vocabulary for the HL7, plus the function definitions are of interest and intended to be part of the discussion at WGM (time allotted)

The SOA information is still being used by the 'old wiki' but the information has been transferred to the Security WiKi

• concern of loss of intellectual property of a non-HL7 site.

FHIR

SOA Requesting Security to be a co-sponsor (as well as FHIR, ITS) HL7 Cloud Implementation Blueprint informative document (although may be shy of an implementation guide which may be planned in the future)

• idea is not to reinvent, looking specifically at how HL7 and SOA standards intersect with the Cloud
• currently, many of our tandards are broadly distributed

The go-no go is What standards do we specifically need for cloud, but lets look at the HL7 standards (existing) through a cloud view