This wiki has undergone a migration to Confluence found Here
<meta name="googlebot" content="noindex">

HL7 FHIR Security 2018-12-11

From HL7Wiki
Revision as of 20:16, 11 December 2018 by JohnMoehrke (talk | contribs) (→‎Minutes)
Jump to navigation Jump to search

Call Logistics

Weekly: Tuesday at 02:00 pm EST

Web conference desktop and VOIP 
Online Meeting ID: security36
Phone: +1 515-604-9567, Participant Code: 880898
 Please be aware that teleconference meetings are recorded to assist with creating the meeting minutes 

Back to HL7 FHIR security topics


Member Name Member Name Member Name
x John Moehrke Security Co-Chair . Kathleen Connor Security Co-Chair . Alexander Mense Security Co-chair
x Suzanne Gonzales-Webb CBCC Co-Chair . Johnathan Coleman CBCC co-chair . Chris Shawn Security co-chair
. Jim Kretz . Kenneth Salyards . Nathan Botts Mobile co-chair
x Diana Proud-Madruga x Joe Lamy AEGIS . Beth Pumo
. Irina Connelly . Matt Blackman Sequoia . Mark Underwood NIST
. Peter Bachman . Grahame Greve FHIR Program Director . Kevin Shekleton (Cerner, CDS Hooks)
. Luis Maas . Julie Maas . Francisco Jauregui
. Gary Dickinson . Dave Silver x Mike Davis
x Peter van Liesdonk . No One x No One





  • John chaired
  • Agenda reviewed and approved: Kathleen/Beth: unanimous
  • Approve 3 minutes: Suzanne/Kathleen: unanimous
  • announcements
    • FHIR R4 is in Grahame's hands and expected released by the end of the year.
  • Isaac reviewed FHIR cast
    • Prime site for reviewing the specification
    • Uses W3C web-sub
    • the hub has last say on context switches, and is usually provided by the dominant software. Often the EHR.
    • Recommendation
      • Should have a Security Considerations section in FHIRcast document that addresses each Security Consideration from web-sub
        • Elevating to SHALL the use of HTTPS, BCP195, and SHA-256
      • Address Audit Logging
        • May be a responsibility of the hub to record approved context changes
        • May be addressed through a subscribing app that does nothing but record context changes
    • Two issues that have been discussed on the FHIR cast github were discussed