Security

Security Project Space

• Security & CBCC Work Group Response to Meaningful Use IFR
• Issue tracking, releases, documentation available at: HL7 Homebase Project
• Web page: Security WG Web Page
• Cookbook for Security Considerations - Instructions for HL7 standards authors and workgroup members
• Security and Privacy Ontology Project - Weekly updates to the draft Security & Privacy Ontology

Schedule

Weekly, Tuesday at 1 pm EST (10 am PST)

• Meeting - Audio and Web Meeting Access Information:

 Conference Audio: 770-657-9270, Access: 845692 
 (US Callers may also use: 888-321-4501 begin_of_the_skype_highlighting              888-321-4501      end_of_the_skype_highlighting)
 **NEW** LIVE MEETING LINK: Click to Join
https://www.livemeeting.com/cc/vaoi/join?id=HL7Security&role=present&pw=X%60w4~Xm

Upcoming Security Calendar

• October 2010 Working Group Meeting - Cambridge/Boston, Massachusetts USA, Security WG Agenda DRAFT

• May 2010 Working Group Meeting - Rio de Janeiro, Security WG Agenda

Minutes and Agenda

• September 14, 2010 Security Conference Call continues at 2pm with Community-Based Collaborative Care Work Group Call
• September 7th, 2010 Security Conference Call continues at 2pm with Community-Based Collaborative Care Work Group Call
• August 31st, 2010 Security Conference Call continues at 2pm with Community-Based Collaborative Care Work Group Call
• August 24th, 2010 Security Conference Call continues at 2pm with Community-Based Collaborative Care Work Group Call
• August 17th, 2010 Security Conference Call continues at 2pm with Community-Based Collaborative Care Work Group Call
• August 10th, 2010 Security Conference Call continues at 2pm with Community-Based Collaborative Care Work Group Call
• August 3rd, 2010 Security Conference Call continues at 2pm with Community-Based Collaborative Care Work Group Call
• July 27th, 2010 Security Conference Call continues at 2pm with Community-Based Collaborative Care Work Group Call
• July 20th, 2010 Security Conference Call continues at 2pm with Community-Based Collaborative Care Work Group Call
• July 13th, 2010 Security Conference Call continues at 2pm with Community-Based Collaborative Care Work Group Call
• July 6th, 2010 Security Conference Call continues at 2pm with Community-Based Collaborative Care Work Group Call

• May 2010 Working Group Meeting - Rio de Janeiro AGENDA May 16-20

• 2010 Meeting Minutes - 2010 Security Conference Call - ARCHIVE to July 2010
• 2009 Meeting Minutes - 2009 Security Conference Call - ARCHIVE to December 2009
• 2008 Meeting Minutes - 2008 Security Conference Call - ARCHIVE

 Security WG Meeting Minutes Template

Back to Meetings

Documents

• Composite Security and Privacy Domain Analysis Model v1_r2 (post 2010May ballot reconciliation)
• Decision Making Practices (TBD)
• Requirement Analysis
  • Security Use Cases
  • Role-Based Access Control (RBAC) Use Cases
  • Security Glossary HL7 2008(c), Version 3 Std
• Documents on HL7 Project Homebase aka HL7 GForge
  • Role Based Access Control (RBAC) Role Engineering Overview, N1 Sept 2009 HL7 baltot site
  • HL7 RBAC Permission Catalog
  • HL7 RBAC Constraint Catalog
  • HL7 RBAC Role Engineering Process (supporting data)
  • HL7 RBAC Permission Catalog mapping to SNOMED CT (initial)
  • HL7 RBAC Permission Catalog mapping to SNOMED CT II
  • A Scenario driven Role Engineering Process for Functional RBAC Roles (RBAC Reference) G. Neumann and M. Strembeck A Scenario-driven Role Engineering Process for Functional RBAC Roles, proc. of the 7th ACM Symposium on Access Control Models and Technologies, pp 33-42, 2002

Cookbook for Security Considerations - Instructions for HL7 standards editors and workgroup members

• HL7 Document on OIDS from May 2009 ballot
• Draft Security DAM Diagram
• Security DAM use cases and their representation in the class diagram
• DRAFT Security DAM Value Sets - US Realm 12/01/2009

Approved Projects

• Security and Privacy Ontology Project Wiki
• RBAC Privacy and Authorization Terminology Project Scope Statement v0 2.doc joint with Community-Based Collaborative Care
  • Project Insight - Project Plan
• CDA R2 Implementation Guide for Privacy Consent Directives May 2010 joint with Community-Based Collaborative Care