August 25, 2015 Security WG Conference Call

Attendees

x	Member Name		x	Member Name		x	Member Name
x	Mike DavisSecurity Co-chair		.	Duane DeCouteau		.	Chris Clark
x	John MoehrkeSecurity Co-chair			Johnathan Coleman		.	Aaron Seib
.	Alexander Mense Security Co-chair		.	Ken Salyards			Christopher D Brown TX
.	Trish WilliamsSecurity Co-chair		.	Gary Dickinson			Dave Silver
x	Kathleen Connor		.	Ioana Singureanu			Mohammed Jafari
x	Suzanne Gonzales-Webb			Rob Horn		.	Galen Mulrooney
x	Diana Proud-Madruga			Ben Goodman			William Kinsley
x	Rick Grow			Chethan Makoahalli			Lloyd McKenzie
.	Debbie Bucci			Bill Kleinebecker			Chris Shawn

Back to Security Main Page

Agenda DRAFT

1. ( 5 min) Roll Call, Agenda Approval
2. ( 5 min) Approve August 18 Meeting Minutes
3. ( 5 min) PASS Access Control Conceptual Model (SOA) Update - Diana, Don Jorgenson
4. (10 min) ACS model - Mike/Dave Silver
5. ( 5 min) Joint Vocabulary Alignment Update - Diana
6. ( 5 min) PSAF Update - Kathleen (same as agenda item #7/done at same meeting)
7. ( 25 min) FHIR Security Discussion
   • Note that DSTU2 publication deadline is this Sunday. So all changes must be voted on TODAY. All CPs that we can't come to an agreement on today must be deferred!
   • 8595 add two codes to provenance-participant-role for assembler and composer (Kathleen Connor) Persuasive
     • As discussed by Kathleen last week
   • 5395 RIM mappings
     • Kathleen to provide RIM Mappings
   • 6354 W3C Prov mapping
     • Kathleen offered to determine if there is anything more from this CP beyond what we have already aligned.
   • 6303 Add Record Lifecycle Events to AuditEventObjectLifecycle Set (Gary Dickinson) Considered for Future Use
     • Request to pull from block vote. (per Kathleen via e-mail 8/24) Reason: In support of Gary Dickenson, based on consideration during multiple Security and CBCC WG calls to add REL vocabulary to the comprehensive ProvenanceEvent value set, which includes all event codes in selectable sub-value sets] so that implementer can decide which value set is most appropriate to their use case.
     • The block vote recommendation is simply to place the work outside DSTU2 and inside DSTU2.1(3) timeframe
   • 5525 Consent Directive does not appear to be aligned with the 80% (Lloyd McKenzie) Considered for Future Use
     • Request to withdraw for discussion (per Kathleen via e-mail 8/24) Reason: Does not appear to reflect WG position
     • The block vote recommendation is simply to place the work outside DSTU2 and inside DSTU2.1(3) timeframe
   • Motion to approve Block 1
   • Motion to approve both Provenance and AuditEvent as Maturity level 1 -- See FHIR Maturity Model
8. ( 5 min) October 2015 HL7 WGM - Atlanta, Georgia USA - agenda items
   • SOA/Security/CBCC joint Ballot Reconciliation - time requested for TUESDAY Q2
9. (as time allows) Open FHIR Items

FHIR CPs - Block 1

• 3318 Clarify how to use RBAC and ABAC using FHIR (John Moehrke) Considered for Future Use
• 7701 2015May core #992 - Need to categorize person signing (Ioana Singureanu) Not Persuasive
• 7565 2015May core #856 - Fix link (Kathleen Connor) Persuasive
• 8595 add two codes to provenance-participant-role for assembler and composer (Kathleen Connor) Persuasive
• 5694 Request for new security label for when content is removed from a resource for operational reasons (Grahame Grieve) Persuasive with Mod
• 5935 "Break the Glass" Method Description in Security Labels Section is Very Limiting (Ed Costello) Persuasive with Mod
• 6256 define entity and how is different from agent (Eric Haas) Persuasive with Mod
• 7750 2015May core #1071 - Rationalize the design of Provenance Resource and decouple from AuditEvent. (Kathleen Connor) Persuasive with Mod
• 8359 ATNA REST action codes do not cover DSTU2 operations (Ewout Kramer) Persuasive with Mod
• 8589 QA: All properties are included in the Summary (Brian Postlethwate) Persuasive with Mod