This wiki has undergone a migration to Confluence found Here
<meta name="googlebot" content="noindex">

Difference between revisions of "March 8, 2016 Security Conference Call"

From HL7Wiki
Jump to navigation Jump to search
(Created page with "Back to Security Work Group Main Page ==Attendees== {| class="wikitable" |- !x||'''Member Name'''|| !! x ||'''Member Name''' !!|| x ||'''Member Name''' !! |- ...")
 
 
(10 intermediate revisions by 4 users not shown)
Line 11: Line 11:
 
||||.|| [mailto:Chris.R.Clark@wv.gov Chris Clark]
 
||||.|| [mailto:Chris.R.Clark@wv.gov Chris Clark]
 
|-
 
|-
||  x|| [mailto:john.moehrke@med.ge.com John Moehrke]Security Co-chair
+
||  .|| [mailto:john.moehrke@med.ge.com John Moehrke]Security Co-chair
 
||||.|| [mailto:jc@securityrs.com Johnathan Coleman]
 
||||.|| [mailto:jc@securityrs.com Johnathan Coleman]
 
||||.|| [mailto:aaron.seib@2311.net Aaron Seib]
 
||||.|| [mailto:aaron.seib@2311.net Aaron Seib]
Line 22: Line 22:
 
||  .|| [mailto:trish.williams@ecu.edu.au Trish Williams]Security Co-chair
 
||  .|| [mailto:trish.williams@ecu.edu.au Trish Williams]Security Co-chair
 
||||.|| [mailto:gary.dickinson@ehr-standards.com Gary Dickinson]
 
||||.|| [mailto:gary.dickinson@ehr-standards.com Gary Dickinson]
||||.|| [mailto:dsilver@electrosoft-inc.com Dave Silver]
+
||||x|| [mailto:dsilver@electrosoft-inc.com Dave Silver]
 
      
 
      
 
|-
 
|-
Line 30: Line 30:
  
 
|-
 
|-
||  x|| [mailto:Suzanne.Webb@engilitycorp.com Suzanne Gonzales-Webb]
+
||  || [mailto:Suzanne.Webb@engilitycorp.com Suzanne Gonzales-Webb]
||||x|| [mailto:mailto:robert.horn@agfa.com Rob Horn]  
+
|||||| [mailto:mailto:robert.horn@agfa.com Rob Horn]  
 
||||.|| [mailto:Galen.Mulrooney@JPSys.com Galen Mulrooney]
 
||||.|| [mailto:Galen.Mulrooney@JPSys.com Galen Mulrooney]
  
Line 58: Line 58:
 
|-
 
|-
 
||  .|| [mailto:cdoss@ncat.edu Christopher Doss]
 
||  .|| [mailto:cdoss@ncat.edu Christopher Doss]
||||X|| [mailto:kamalinivaidya@systemsmadesimple.com Kamalini Vaidya]
+
||||.|| [mailto:kamalinivaidya@systemsmadesimple.com Kamalini Vaidya]
 
||||.|| [mailto: Stephanie Dyke ]
 
||||.|| [mailto: Stephanie Dyke ]
 +
||||X|| [mailto:Richard.Grow@va.gov Richard Grow ]
 
|-
 
|-
  
Line 68: Line 69:
 
==Agenda '''DRAFT'''==
 
==Agenda '''DRAFT'''==
 
# ''( 5 min)'' '''Roll Call, Agenda Approval'''
 
# ''( 5 min)'' '''Roll Call, Agenda Approval'''
# ''( 5 min)'' '''Approve [http://wiki.hl7.org/index.php?title=February_23,_2016_Security_Conference_Call February 23, 2016 Security WG Conference Call Minutes]
+
# ''( 5 min)'' '''Approve [http://wiki.hl7.org/index.php?title=March_1,_2016_Security_Conference_Call March 1, 2016 Security WG Conference Call Minutes]
# ''( 5 min)'' '''Call for comments on ISO 21298 HI - Functional and Structural roles''' - Rick G.  
+
# ''( 5 min)'' '''Call for comments on ISO 21298 HI - Functional and structural roles''' - Rick G.  
 
# ''( 5 min)'' '''PASS Access Control Services Conceptual Model''' - Diana
 
# ''( 5 min)'' '''PASS Access Control Services Conceptual Model''' - Diana
 
# ''( 5 min)'' '''Joint Vocabulary Alignment Update''' - Diana
 
# ''( 5 min)'' '''Joint Vocabulary Alignment Update''' - Diana
 
# ''( 5 min)'' '''PASS Audit Conceptual Model – Diana
 
# ''( 5 min)'' '''PASS Audit Conceptual Model – Diana
 
# ''( 5 min)'' '''FHIR Security '''report out  - John  
 
# ''( 5 min)'' '''FHIR Security '''report out  - John  
 +
#* Any changes expecting to be tested at the next FHIR Connectathon need to be submitted into the build by March 27th.
  
 
Note that there will be a FHIR Security call at 2pm PT/5pm ET
 
Note that there will be a FHIR Security call at 2pm PT/5pm ET
Line 79: Line 81:
  
 
= Minutes =
 
= Minutes =
 +
#Kathleen chaired.  Approved Agenda and  [http://wiki.hl7.org/index.php?title=March_8,_2016_Security_Conference_Call Security WG March 8 Minutes]
 +
#  Discuss any comments on Draft ISO 21089 Health informatics - Trusted (Mike)
 +
end-to-end information flows for submission by 215 National Member Bodies. Appendices include FHIR Record Lifecycle Event Implementation Guide from FHIR DSTU-2
 +
*        Discussion on EHR WKGP/FHIR Record cycle events
 +
*        Comments were accepted by EHR WKG
 +
*        Based on FHIR second edition (Document was shared on screen)
 +
*        Review of Appendix A (Healthcare Interoperability Examples)
 +
*        Comments, Mike:
 +
**No copy right notices regarding HL7 Material 2) Appendix B Life Cycle Mta Data Capture; Rick and Mike reviewed and found the table to be confusing The W5 is highlighted
 +
** Not clear what action or performers are recording Record Author User, or Record by Author User? Is this an action performer, needs further clarity by Gary.
 +
**Question if Audit Event is a Column heading or description, the layout is not clear Note: Gary is creator of the table confirmed by Diana) difficulty understanding the table for W5 3) Appendix B, Questions on coding 4) to Change Record to Record life cycle event
 +
**Note: The appendices were copied from the FHIR implementation guide
 +
Governance and IP concerns – Mike:
 +
*Draft has been presented to U.S Tag TC215, which has only two members from HL7 Security WG
 +
** Gary informed it has been submitted and HL7 does not have the right to comment but can see parts of the appendices
 +
** Rick asked since HL7 is an ISO specification, HL7 should be able to participate?
 +
**Diana is waiting to hear from TC215 Secretary to obtain details on how Hl7 can participate
 +
**According to Gary the appendicitis are copied from the FHIR implementation guide, part of DSTU- Diana
 +
**Initial ballot is in May, and Official Ballet is in July
 +
*Action Item: (Kathleen) - Request review of governance concerns to HL7 Standards Governance Board and IP issues with Karen Van Hentenryck
 +
Mike moved to approve action item.  Glen seconded. 9-0-0
 +
*Next Steps:
 +
*HL7 chairs would let him know we would appreciate more input (Mike)
 +
#Review HL7 2017 ONC Interoperability Standards Advisory Cover Letter and HL7 2017 ONC Interoperability Standards Advisory draft recommendations.  WG had no new update, no new issues.
 +
#Health Care Privacy Security by Design – Rob Grow
 +
*WG discussed ambiguities about the nature of the final deliverable, e.g. is it a conceptual model, a platform independent IG?  Item deferred until further discussion with ARB, and incorporation of input from Security WG wrt to actual deliverable.  Rick will send invite to that discussion to the WG.
 +
#Joint Vocabulary Alignment Update – Diana: Meetings will resume next week
 +
#PASS Access Control Conceptual Model – Diana:  Still waiting to hear back from Alex on the withdrawal of Bernd’s negative vote, will reach out to Alex. 
 +
#PASS Audit Conceptual Model – Diana:  Functional Model is available.  New material: We have detailed requirements on high level audit requirements surrounding the service
 +
#FHIR Security report out - John
 +
*Approvals of CP's
 +
*Approved CPS are updates
 +
*Signature is now in discussion

Latest revision as of 17:57, 22 March 2016

Back to Security Work Group Main Page

Attendees

x Member Name x Member Name x Member Name
x Kathleen ConnorSecurity Co-chair . Duane DeCouteau . Chris Clark
. John MoehrkeSecurity Co-chair . Johnathan Coleman . Aaron Seib
. Alexander Mense Security Co-chair . Ken Salyards . Christopher D Brown TX
. Trish WilliamsSecurity Co-chair . Gary Dickinson x Dave Silver
x Mike Davis . Ioana Singureanu . Mohammed Jafari
Suzanne Gonzales-Webb Rob Horn . Galen Mulrooney
x Diana Proud-Madruga . Ken Rubin . William Kinsley
x Rick Grow . Paul Knapp x Mayada Abdulmannan
x Glen Marshall, SRS . Bill Kleinebecker x Christopher Shawn
. Oliver Lawless . ... . Serafina Versaggi
X Beth Pumo . Russell McDonell . Paul Petronelli , Mobile Health
. Christopher Doss . Kamalini Vaidya . [mailto: Stephanie Dyke ] X Richard Grow

Back to Security Main Page

Agenda DRAFT

  1. ( 5 min) Roll Call, Agenda Approval
  2. ( 5 min) Approve March 1, 2016 Security WG Conference Call Minutes
  3. ( 5 min) Call for comments on ISO 21298 HI - Functional and structural roles - Rick G.
  4. ( 5 min) PASS Access Control Services Conceptual Model - Diana
  5. ( 5 min) Joint Vocabulary Alignment Update - Diana
  6. ( 5 min) PASS Audit Conceptual Model – Diana
  7. ( 5 min) FHIR Security report out - John
    • Any changes expecting to be tested at the next FHIR Connectathon need to be submitted into the build by March 27th.

Note that there will be a FHIR Security call at 2pm PT/5pm ET See agenda at FHIR Security Agenda

Minutes

  1. Kathleen chaired. Approved Agenda and Security WG March 8 Minutes
  2. Discuss any comments on Draft ISO 21089 Health informatics - Trusted (Mike)

end-to-end information flows for submission by 215 National Member Bodies. Appendices include FHIR Record Lifecycle Event Implementation Guide from FHIR DSTU-2

  • Discussion on EHR WKGP/FHIR Record cycle events
  • Comments were accepted by EHR WKG
  • Based on FHIR second edition (Document was shared on screen)
  • Review of Appendix A (Healthcare Interoperability Examples)
  • Comments, Mike:
    • No copy right notices regarding HL7 Material 2) Appendix B Life Cycle Mta Data Capture; Rick and Mike reviewed and found the table to be confusing The W5 is highlighted
    • Not clear what action or performers are recording Record Author User, or Record by Author User? Is this an action performer, needs further clarity by Gary.
    • Question if Audit Event is a Column heading or description, the layout is not clear Note: Gary is creator of the table confirmed by Diana) difficulty understanding the table for W5 3) Appendix B, Questions on coding 4) to Change Record to Record life cycle event
    • Note: The appendices were copied from the FHIR implementation guide

Governance and IP concerns – Mike:

  • Draft has been presented to U.S Tag TC215, which has only two members from HL7 Security WG
    • Gary informed it has been submitted and HL7 does not have the right to comment but can see parts of the appendices
    • Rick asked since HL7 is an ISO specification, HL7 should be able to participate?
    • Diana is waiting to hear from TC215 Secretary to obtain details on how Hl7 can participate
    • According to Gary the appendicitis are copied from the FHIR implementation guide, part of DSTU- Diana
    • Initial ballot is in May, and Official Ballet is in July
  • Action Item: (Kathleen) - Request review of governance concerns to HL7 Standards Governance Board and IP issues with Karen Van Hentenryck

Mike moved to approve action item. Glen seconded. 9-0-0

  • Next Steps:
  • HL7 chairs would let him know we would appreciate more input (Mike)
  1. Review HL7 2017 ONC Interoperability Standards Advisory Cover Letter and HL7 2017 ONC Interoperability Standards Advisory draft recommendations. WG had no new update, no new issues.
  2. Health Care Privacy Security by Design – Rob Grow
  • WG discussed ambiguities about the nature of the final deliverable, e.g. is it a conceptual model, a platform independent IG? Item deferred until further discussion with ARB, and incorporation of input from Security WG wrt to actual deliverable. Rick will send invite to that discussion to the WG.
  1. Joint Vocabulary Alignment Update – Diana: Meetings will resume next week
  2. PASS Access Control Conceptual Model – Diana: Still waiting to hear back from Alex on the withdrawal of Bernd’s negative vote, will reach out to Alex.
  3. PASS Audit Conceptual Model – Diana: Functional Model is available. New material: We have detailed requirements on high level audit requirements surrounding the service
  4. FHIR Security report out - John
  • Approvals of CP's
  • Approved CPS are updates
  • Signature is now in discussion