HL7 FHIR Security 2018-02-06

Call Logistics

Weekly: Tuesday at 05:00 EST (2 PM PST)

Web conference desktop and VOIP https://www.freeconferencecall.com/join/security36 
Online Meeting ID: security36
Phone: +1 515-604-9567, Participant Code: 880898
 Please be aware that teleconference meetings are recorded to assist with creating the meeting minutes 

Back to HL7 FHIR security topics

Attendees

	Member Name			Member Name			Member Name
x	John Moehrke Security Co-Chair		x	Kathleen Connor Security Co-Chair		.	Alexander Mense Security Co-chair
.	Suzanne Gonzales-Webb CBCC Co-Chair		.	Johnathan Coleman CBCC Co-Chair		.	Mike Davis
.	Reed Gelzer RM-ES Lead		.	Glen Marshal		x	Joe Lamy AEGIS
.	Diana Proud-Madruga		.	Rob Horn		.	Beth Pumo
.	Irina Connelly		.	Mario Hyland AEGIS		.	Mark Underwood NIST

Agenda

• Roll;
• approval of agenda
• approval of the HL7 FHIR Security 2017-12-05 Minutes
• All security open http://gforge.hl7.org/gf/project/fhir/tracker/?action=TrackerItemBrowse&tracker_id=677&tracker_query_id=4967
• Block Vote to go out ASAP
  • https://gforge.hl7.org/gf/project/fhir/tracker/?action=TrackerItemBrowse&tracker_id=677&querynav=%2Fgf%2Fproject%2Ffhir%2Ftracker%2F%3Faction%3DTrackerItemBrowse%26tracker_id%3D677%26forget_query%3D1&quickquery=1&tracker_item_id=&summary=&submitted_by=&priority=&assigned_to=&extra_field%5B4214%5D=&extra_field%5B4215%5D=&extra_field%5B4060%5D=&extra_field%5B3631%5D=&extra_field%5B3807%5D=&extra_field%5B3808%5D=&extra_field%5B3628%5D=13120&extra_field%5B3626%5D=&extra_field%5B4065%5D=&extra_field%5B4092%5D=&extra_field%5B4063%5D=18940&extra_field%5B4062%5D=&extra_field%5B2415%5D=-3&extra_field%5B4252%5D=&extra_field%5B3633%5D=&extra_field%5B3969%5D=&extra_field%5B4069%5D=&extra_field%5B4066%5D=&extra_field%5B4071%5D=&extra_field%5B3632%5D=&sortcol=last_modified_date&sortord=DESC

Minutes

• John chaired
• did not review previous minutes
• Reviewed current block vote candidates
  • Kathleen wants to add to 14028
  • Joe provided some fixes to existing wording proposal
• Reviewed those not in block vote
• Worked on mapping Provenance with Event Pattern
  • Event pattern requires a status element. Provenance is a statement, not a resource that will go through a lifecycle
  • Event pattern requires a subject element. Provenance is used for all FHIR Resources, therefore there is no dedicated subject element. Provenance is discovered from the target it points at, not from the subjects.
  • It does seem that Provenance.reason should get renamed to Provenance.purpose so that it is more clear, and so that it doesn't conflict with Event.reasonCode concept.
  • It does seem that activity should get renamed to reasonCode as it is the activity that caused the create/update/delete that is preserved in Provenance. It is not clear, so need more thought on this one.
  • Should rename agent to performer. This would be better understood in context of the Event pattern, and also by the records and security domains.
• AuditEvent
  • Similar observations to Provenance
• Action: John to bring this up with Lloyd