HL7 FHIR Security 2016-10-11

Call Logistics

Weekly: Tuesday at 05:00 EST (2 PM PST)

Conference Audio: 770-657-9270,' Access: 845692
Join online meeting:  https://global.gotomeeting.com/join/520841173  
 Please be aware that teleconference meetings are recorded to assist with creating the meeting minutes 

Back to HL7 FHIR security topics

Attendees

	Member Name			Member Name			Member Name
x	John Moehrke Security Co-Chair		x	Kathleen Connor Security Co-Chair		x	Suzanne Gonzales-Webb CBCC Co-Chair
.	Gary Dickinson EHR Co-Chair		.	Johnathan ColemanCBCC Co-Chair		x	Mike Davis
.	Reed Gelzer RM-ES Lead		x	Glen Marshal		.	Galen Mulrooney
.	Dave Silver		x	Rob Horn		x	Judy Fincher
.	Diana Proud-Madruga		.	Beth Pumo		.	Oliver Lawless
.	Bob Dieterle		.	Mario Hyland		x	Joe Lamy
.	Rick Grow		.	[mailto: Richard Etterma]		.	[mailto: Wayne Kubic]

Agenda

• Roll;
• approval of agenda
• approval of the HL7 FHIR Security 2016-10-04 Minutes
• All security open http://gforge.hl7.org/gf/project/fhir/tracker/?action=TrackerItemBrowse&tracker_id=677&tracker_query_id=4967
• September Ballot items must address by November 20 -- see http://wiki.hl7.org/index.php?title=FHIR_Ballot_Prep
• Discuss Items ready for Vote -- Start a week long block vote
• Discuss Action items
• New business?

FHIR Security ready for block vote

I believe these are ready for a block vote. Recommend a block vote be started.

• 9564 Should FHIR AuditEvent resource include DICOM extension of ATNA Audit log message ? (Madhusudana B Shivalinge Gowda) Persuasive with Mod
• 9750 Add Standard Extension to Domain Resource for Sourcing Acquired Data (Peter Bernhardt) Not Persuasive
• 10343 Three additional Signature.type codes (Kathleen Connor) None
• 10184 Linkage vs provenance (Brian Postlethwate) Not Persuasive
• 11084 Typo - 2016-09 core #165 (Andrew Gregorowicz) Not Persuasive with Mod
• 10408 AuditEvent - Add ISO/HL7 10781 (EHR-S FM) and ISO 21089 (Trusted End-to-End) to Front Matter (Gary Dickinson) Persuasive
• 10409 Provenance - Add ISO/HL7 10781 (EHR-S FM) and ISO 21089 (Trusted End-to-End) to Front Matter (Gary Dickinson) Persuasive
• 10465 Change AuditEvent.purposeOfUse and AuditEvent.agent.purposeOfUse from Coding to CodeableConcept (Marten Smits) Persuasive
• 11082 Make proposed wording change - 2016-09 core #163 (Andrew Gregorowicz) Persuasive
• 11083 OAuth is an authorization protocol, not an authentication protocol. Specify Oauth 2.0 to reduce ambiguity - 2016-09 core #164 (Andrew Gregorowicz) Persuasive
• 11141 Specify agent organizational role - 2016-09 core #295 (Perry Mar) Persuasive with Mod

Action Items

• Kathleen
  • 9042 Add RBAC as value set for AuditEvent.participant.role (Kathleen Connor) None
  • 9043 Add ABAC as alternative value set for AuditEvent.participant.role (Kathleen Connor) None
  • 9052 Add SNOMED Stuctural Roles as value set for AuditEvent.participant.role (Kathleen Connor) None
  • 10382 Provenance activity codes are insufficient/inappropriate (Lloyd McKenzie) None
  • 11071 Improve security label guidance - 2016-09 core #90 (Kathleen Connor) None
• John
  • 9167 AuditEvent needs to make more obvious how to record a break-glass event (John Moehrke) None
  • 10580 How should test data be identified? (John Moehrke) None
  • 10581 something should be said about de-identification (John Moehrke) None
  • 10579 New Security and Privacy "Module" page needs content (John Moehrke) None
• Glen
  • 9996 Using Provenance resource to annotate content derived from non-FHIR sources (Simone Heckmann) None
• Gary
  • 6303 Add Record Lifecycle Events to AuditEventObjectLifecycle Set (Gary Dickinson) None