This wiki has undergone a migration to Confluence found Here
<meta name="googlebot" content="noindex">

Difference between revisions of "April 4, 2017 Security Conference Call"

From HL7Wiki
Jump to navigation Jump to search
(Created page with "Back to Security Main Page ==Attendees== {| class="wikitable" |- !x||'''Member Name'''|| !! x ||'''Member Name''' !!|| x ||'''Member Name''' !!|| x ||'''Membe...")
 
 
(9 intermediate revisions by the same user not shown)
Line 12: Line 12:
 
||||.|| [mailto:trish.williams@ecu.edu.au Trish Williams]Security Co-chair
 
||||.|| [mailto:trish.williams@ecu.edu.au Trish Williams]Security Co-chair
 
|-
 
|-
||  x|| [mailto:mike.davis@va.gov Mike Davis]
+
||  .|| [mailto:mike.davis@va.gov Mike Davis]
 
||||x|| [mailto:Suzanne.Webb@engilitycorp.com Suzanne Gonzales-Webb]
 
||||x|| [mailto:Suzanne.Webb@engilitycorp.com Suzanne Gonzales-Webb]
 
||||x|| [mailto:drs@securityrs.com David Staggs]
 
||||x|| [mailto:drs@securityrs.com David Staggs]
 
||||x|| [mailto:mjafari@edmondsci.com Mohammed Jafari]
 
||||x|| [mailto:mjafari@edmondsci.com Mohammed Jafari]
 
|-
 
|-
||  x|| [mailto:gfm@securityrs.com Glen Marshall], SRS
+
||  .|| [mailto:gfm@securityrs.com Glen Marshall], SRS
||||x|| [mailto:Beth.Pumo@kp.org Beth Pumo]
+
||||.|| [mailto:Beth.Pumo@kp.org Beth Pumo]
 
||||.|| [mailto:ioana.singureanu@gmail.com Ioana Singureanu]
 
||||.|| [mailto:ioana.singureanu@gmail.com Ioana Singureanu]
 
||||.|| [mailto:robert.horn@agfa.com Rob Horn]  
 
||||.|| [mailto:robert.horn@agfa.com Rob Horn]  
 
|-
 
|-
||  x|| [mailto:Diana.Proud-Madruga@engilitycorp.com Diana Proud-Madruga]
+
||  .|| [mailto:Diana.Proud-Madruga@engilitycorp.com Diana Proud-Madruga]
 
||||.|| [mailto:serafina.versaggi@gmail.com Serafina Versaggi ]
 
||||.|| [mailto:serafina.versaggi@gmail.com Serafina Versaggi ]
||||x|| [mailto:joe.lamy@aegis.net Joe Lamy]
+
||||.|| [mailto:joe.lamy@aegis.net Joe Lamy]
 
||||.|| [mailto:Galen.Mulrooney@JPSys.com Galen Mulrooney]
 
||||.|| [mailto:Galen.Mulrooney@JPSys.com Galen Mulrooney]
 
|-
 
|-
Line 37: Line 37:
 
||||x|| [mailto:dsilver@electrosoft-inc.com Dave Silver]
 
||||x|| [mailto:dsilver@electrosoft-inc.com Dave Silver]
 
|-
 
|-
||  x|| [mailto:rgrow@technatomy.com Rick Grow]
+
||  .|| [mailto:rgrow@technatomy.com Rick Grow]
 
||||.|| [mailto:bkinsley@nextgen.com William Kinsley]
 
||||.|| [mailto:bkinsley@nextgen.com William Kinsley]
 
||||.|| [mailto:pknapp@pknapp.com Paul Knapp]   
 
||||.|| [mailto:pknapp@pknapp.com Paul Knapp]   
Line 44: Line 44:
 
||  .|| [mailto:kamalinivaidya@systemsmadesimple.com Kamalini Vaidya]
 
||  .|| [mailto:kamalinivaidya@systemsmadesimple.com Kamalini Vaidya]
 
||||.|| [mailto:akleinebe@gmail.com Bill Kleinebecker ]
 
||||.|| [mailto:akleinebe@gmail.com Bill Kleinebecker ]
||||x|| [mailto:Christopher.Shawn2@va.gov Christopher Shawn]
+
||||.|| [mailto:Christopher.Shawn2@va.gov Christopher Shawn]
 
||||.|| [mailto:grahameg@gmail.com Grahame Grieve]
 
||||.|| [mailto:grahameg@gmail.com Grahame Grieve]
 
|-
 
|-
||  .|| [mailto:oliver@lawless.co Oliver Lawless]
+
||  x|| [mailto:boccamad@MSKCC.ORG Donna Boccamazzo]
 
||||.|| [mailto:Ken.Rubin@hp.com Ken Rubin]
 
||||.|| [mailto:Ken.Rubin@hp.com Ken Rubin]
 
||||.|| [mailto:dtao12@gmail.com David Tao]
 
||||.|| [mailto:dtao12@gmail.com David Tao]
Line 58: Line 58:
 
# ''(2 min)'' '''Roll Call, Agenda Approval'''  
 
# ''(2 min)'' '''Roll Call, Agenda Approval'''  
 
# ''(4 min)'' ''' Review and Approval of [http://wiki.hl7.org/index.php?title=March_28,_2017_Security_Conference_Call Security WG Call Minutes March 28, 2017]'''  
 
# ''(4 min)'' ''' Review and Approval of [http://wiki.hl7.org/index.php?title=March_28,_2017_Security_Conference_Call Security WG Call Minutes March 28, 2017]'''  
# ''(20 min)'' '''Madrid WGM Draft Agenda Review''' - Kathleen  
+
# ''(20 min)'' '''[http://wiki.hl7.org/index.php?title=HL7_WGM_MAY_2017_-_Madrid_Spain_AGENDA Madrid WGM Draft Agenda Review]''' - Kathleen  
 
# ''(5 min)'' '''FHIR Security Call - [http://build.fhir.org/secpriv-module.html Please review front matter]''' - John Moehrke
 
# ''(5 min)'' '''FHIR Security Call - [http://build.fhir.org/secpriv-module.html Please review front matter]''' - John Moehrke
  
 
=='''Minutes'''==
 
=='''Minutes'''==
 +
*Chaired by Alex. Donna Boccamazzo, scribe.
 +
*Agenda approved by consensus.
 +
*[http://wiki.hl7.org/index.php?title=March_28,_2017_Security_Conference_Call March 28th call minutes] reviewed and approved.
 +
''[http://wiki.hl7.org/index.php?title=HL7_WGM_MAY_2017_-_Madrid_Spain_AGENDA Madrid WGM Draft Agenda Review]''
 +
*Kathleen presented draft Security agenda for Madrid.
 +
*CBCC and Security to coordinate to meet with Bernd Blobel
 +
*Copied agenda from San Antonio; may refine
 +
*Tuesday Opening Session
 +
**Tues Q2: Trust framework as it’s the major work item for this working group meeting
 +
**Tues Q3 CBCC FHIR Joint on FHIR Consent Resource;  may move
 +
**Tues Q2 or Q3: Potentially have Bernd present on items from EU, ISO and his comments on new trust framework ballot.
 +
*Wednesday
 +
**Wed Q1:  Joint w/ EHR, CBCC, FHIR, SOA, Security
 +
**Mario Hyland agreed to continue discussions, with Gary Dickinson, about creating a test suite for FHIR Privacy, Security, Provenance, and Digital Ledger Technology;  has expectation that Security would bring test case; could work on during FHIR Security call
 +
**Josh Mandel project with Smart on FHIR - one approach to authorization using OAuth
 +
**Project pioneered by VA at Connectathon in January for cascading OAuth and continued to enhance for HIMSS; provides alternative especially for use cases involving patient right of access
 +
**Need to confirm with Gary from EHR. Have not discussed with CBCC FHIR or SOA. Need to confirm with David Pyke from CBCC.
 +
**Wed Q2:  Joint w/ SOA; Kathleen will reach out to Ken Rubin to help set agenda
 +
**Wed Q4:  Continue work on trust framework reconciliation or WG Health
 +
*Thursday
 +
**Thurs Q1: Security Joint with FHIR-I
 +
**Thurs Q2 and Q3:  interim planning; harmonization proposals 
 +
**Alex to reach out to Josh to schedule a meeting.  May need to reschedule other sessions.
 +
''[http://wiki.hl7.org/index.php?title=May_2017_CBCC_Working_Group_Meeting_-_Madrid,_Spain Review of CBCC Madrid Agenda]''
 +
*Monday Opening Session Q3/Q4 Joint with Security
 +
**Suzanne asked Kathleen to update the following:
 +
***New Joint Project Review
 +
***New Discussion Items
 +
*Tuesday Q3
 +
**Perhaps use to meet with David and Nathan if Bernd does not use this session
 +
**Perhaps meet with Andy Stechishin re Mobile Apps to explain differences in platforms and business models as they will drive policies surrounding functional requirements for privacy and security
 +
**Kathleen to add as possible agenda item (Per Suzanne, joint sessions are based off invitations received; schedule for Joint Security and Mobile Health is firm but discussion is flexible.) Kathleen to email co-chairs to garner interest. 
 +
*Tuesday Q4 Joint with FHIR - per Suzanne, no ballot reconciliation; discussion regarding STU3 vs STU4
 +
*Reminders for today’s FHIR Security call:  please review front matter.
 +
Call Ended.

Latest revision as of 19:06, 11 April 2017

Back to Security Main Page

Attendees

x Member Name x Member Name x Member Name x Member Name
. John MoehrkeSecurity Co-chair x Kathleen ConnorSecurity Co-chair . Alexander Mense Security Co-chair . Trish WilliamsSecurity Co-chair
. Mike Davis x Suzanne Gonzales-Webb x David Staggs x Mohammed Jafari
. Glen Marshall, SRS . Beth Pumo . Ioana Singureanu . Rob Horn
. Diana Proud-Madruga . Serafina Versaggi . Joe Lamy . Galen Mulrooney
. Duane DeCouteau . Chris Clark . Johnathan Coleman . Aaron Seib
. Ken Salyards . Christopher D Brown TX . Gary Dickinson x Dave Silver
. Rick Grow . William Kinsley . Paul Knapp x Mayada Abdulmannan
. Kamalini Vaidya . Bill Kleinebecker . Christopher Shawn . Grahame Grieve
x Donna Boccamazzo . Ken Rubin . David Tao . Nathan Botts

Back to Security Main Page

Agenda

  1. (2 min) Roll Call, Agenda Approval
  2. (4 min) Review and Approval of Security WG Call Minutes March 28, 2017
  3. (20 min) Madrid WGM Draft Agenda Review - Kathleen
  4. (5 min) FHIR Security Call - Please review front matter - John Moehrke

Minutes

  • Chaired by Alex. Donna Boccamazzo, scribe.
  • Agenda approved by consensus.
  • March 28th call minutes reviewed and approved.

Madrid WGM Draft Agenda Review

  • Kathleen presented draft Security agenda for Madrid.
  • CBCC and Security to coordinate to meet with Bernd Blobel
  • Copied agenda from San Antonio; may refine
  • Tuesday Opening Session
    • Tues Q2: Trust framework as it’s the major work item for this working group meeting
    • Tues Q3 CBCC FHIR Joint on FHIR Consent Resource; may move
    • Tues Q2 or Q3: Potentially have Bernd present on items from EU, ISO and his comments on new trust framework ballot.
  • Wednesday
    • Wed Q1: Joint w/ EHR, CBCC, FHIR, SOA, Security
    • Mario Hyland agreed to continue discussions, with Gary Dickinson, about creating a test suite for FHIR Privacy, Security, Provenance, and Digital Ledger Technology; has expectation that Security would bring test case; could work on during FHIR Security call
    • Josh Mandel project with Smart on FHIR - one approach to authorization using OAuth
    • Project pioneered by VA at Connectathon in January for cascading OAuth and continued to enhance for HIMSS; provides alternative especially for use cases involving patient right of access
    • Need to confirm with Gary from EHR. Have not discussed with CBCC FHIR or SOA. Need to confirm with David Pyke from CBCC.
    • Wed Q2: Joint w/ SOA; Kathleen will reach out to Ken Rubin to help set agenda
    • Wed Q4: Continue work on trust framework reconciliation or WG Health
  • Thursday
    • Thurs Q1: Security Joint with FHIR-I
    • Thurs Q2 and Q3: interim planning; harmonization proposals
    • Alex to reach out to Josh to schedule a meeting. May need to reschedule other sessions.

Review of CBCC Madrid Agenda

  • Monday Opening Session Q3/Q4 Joint with Security
    • Suzanne asked Kathleen to update the following:
      • New Joint Project Review
      • New Discussion Items
  • Tuesday Q3
    • Perhaps use to meet with David and Nathan if Bernd does not use this session
    • Perhaps meet with Andy Stechishin re Mobile Apps to explain differences in platforms and business models as they will drive policies surrounding functional requirements for privacy and security
    • Kathleen to add as possible agenda item (Per Suzanne, joint sessions are based off invitations received; schedule for Joint Security and Mobile Health is firm but discussion is flexible.) Kathleen to email co-chairs to garner interest.
  • Tuesday Q4 Joint with FHIR - per Suzanne, no ballot reconciliation; discussion regarding STU3 vs STU4
  • Reminders for today’s FHIR Security call: please review front matter.

Call Ended.