This wiki has undergone a migration to Confluence found Here
<meta name="googlebot" content="noindex">

Difference between revisions of "Security and Privacy Ontology"

From HL7Wiki
Jump to navigation Jump to search
 
(83 intermediate revisions by the same user not shown)
Line 6: Line 6:
  
 
=Introduction=
 
=Introduction=
This page is intended to provide a focal point for the Security and Privacy Ontology Project; a hub for connecting to its artifacts, discussions, status and links to related projects and work groups. Most of the technical content for this project will be contained within its artifacts which will be linked to on this page and stored on [http://gforge.hl7.org GForge] or other wikis.  This page will provide sufficient content for project and document organization.
+
This page provides a focal point for the HL7 Security and Privacy Ontology Project: a hub for connecting to its artifacts, discussions, status and links to related projects and work groups. Most of the technical content for this project will be contained within its artifacts which will be linked via this page and stored on [http://gforge.hl7.org GForge].
  
==Scope==
+
=Standard=
 +
[http://www.hl7.org/implement/standards/product_brief.cfm?product_id=348 HL7 Version 3 Standard: Security and Privacy Ontology, Release 1]
 +
 
 +
=Scope=
 
The scope of the project was defined by the answers to a set of ''[[Security and Privacy Ontology Project Scope|scoping questions]].''
 
The scope of the project was defined by the answers to a set of ''[[Security and Privacy Ontology Project Scope|scoping questions]].''
  
==Project Documentation==
+
=Project Documentation=
 
[http://gforge.hl7.org/gf/download/docmanfileversion/5530/7043/HL7ProjectScopeStatementv2010MarSecurityandPrivacyOntology20100320JMD.doc Approved Project Scope Statement]
 
[http://gforge.hl7.org/gf/download/docmanfileversion/5530/7043/HL7ProjectScopeStatementv2010MarSecurityandPrivacyOntology20100320JMD.doc Approved Project Scope Statement]
  
==Ontology Development Methodology==
+
=Presentations=
 +
An introduction to Description Logic, OWL and Protégé:
 +
*[http://gforge.hl7.org/gf/download/docmanfileversion/5561/7128/OWLProt%C3%A9g%C3%A9andSecurity-PrivacyOntology.pdf OWL, Protege and Security-Privacy Ontology]
 +
 
 +
Overview and Status:
 +
*[http://gforge.hl7.org/gf/download/docmanfileversion/7679/11169/Security%20and%20Privacy%20Ontology%20-%20Nov%202013.pptx Security and Privacy Ontology; November 2013]
 +
 
 +
Working Presentations:
 +
*[http://gforge.hl7.org/gf/download/docmanfileversion/7423/10673/IntegrationofHL7SecurityandPrivacyOntologywithOtherOntologies.pptx Integration of HL7 Security and Privacy Ontology with Other Ontologies (May 2013; revised July 2013)]
 +
 
 +
*[http://gforge.hl7.org/gf/download/docmanfileversion/8368/12394/Friendly%20Healthcare%20Security-Privacy%20Language%20via%20Ontology%20-%20Revised%20September%2015%202014.pptx Friendly Healthcare Security-Privacy Language via Ontology - Revised September 15, 2014]
 +
 
 +
*[http://gforge.hl7.org/gf/download/docmanfileversion/8359/12368/Methodology%20for%20EHR%20and%20Security-Privacy%20Vocabulary%20Alignment%20-%20Revised%20August%2019%202014.pptx Methodology for EHR and Security-Privacy Vocabulary Alignment - Revised August 19, 2014]
 +
 
 +
=Ontology Development Methodology=
 
This ''[[Ontology Development Methodology|methodology]]'' has been derived from a '''[http://protege.stanford.edu/publications/ontology_development/ontology101-noy-mcguinness.html guide]'''used by the Protégé team and demonstrates a basic model development process that shares some steps with '''[http://gforge.hl7.org/gf/download/frsrelease/608/6671/HDF_1.5.pdf HL7 HDF]'''.  The draft was written from the standpoint of developing an ontology from scratch.
 
This ''[[Ontology Development Methodology|methodology]]'' has been derived from a '''[http://protege.stanford.edu/publications/ontology_development/ontology101-noy-mcguinness.html guide]'''used by the Protégé team and demonstrates a basic model development process that shares some steps with '''[http://gforge.hl7.org/gf/download/frsrelease/608/6671/HDF_1.5.pdf HL7 HDF]'''.  The draft was written from the standpoint of developing an ontology from scratch.
  
==Use Cases==
+
=Use Cases=
 
[[Security_and_Privacy_Ontology_Use_Cases#Access Control Based on Category of Action|Access Control Based on Category of Action]]
 
[[Security_and_Privacy_Ontology_Use_Cases#Access Control Based on Category of Action|Access Control Based on Category of Action]]
  
Line 32: Line 49:
 
[[Security_and_Privacy_Ontology_Use_Cases#Facilitate an Automated Decision Function|Facilitate an Automated Decision Function]]
 
[[Security_and_Privacy_Ontology_Use_Cases#Facilitate an Automated Decision Function|Facilitate an Automated Decision Function]]
  
==Other Ontologies==
+
=Tooling=
[http://bioportal.bioontology.org/ontologies/39798 Situation-Based Access Control]
 
 
 
==Tooling==
 
 
This project uses the ''Protégé-OWL Editor'' for ontology editing and the ''Ontology Browser'' for Web-based ontology review.
 
This project uses the ''Protégé-OWL Editor'' for ontology editing and the ''Ontology Browser'' for Web-based ontology review.
  
===Protégé-OWL Editor===
+
==Protégé-OWL Editor==
Description: [http://protege.stanford.edu/overview/protege-owl.html Protégé-OWL Editor]
+
The Protégé-OWL Editor operates on OWL 2 ontologies. It also handles SWRL.  The Security and Privacy Ontology is currently edited with the ''Protégé 4.3 Release'' version.
 +
 +
*Description: [http://protege.stanford.edu/overview/protege-owl.html Protégé-OWL Editor]
 +
*Download: [http://protege.stanford.edu/download/protege/4.3/installanywhere/Web_Installers/ Protégé Desktop 4.3]
  
We are using version 4.1, which can be downloaded from: [http://protege.stanford.edu/download/registered.html#p4.1 Protégé 4.1]
+
==Ontology Browser==
 +
The Ontology Browser provides read-only access to OWL 2 ontologies.
  
===Ontology Browser===
+
*Description: [http://code.google.com/p/ontology-browser/ Ontology Browser]
Description: [http://code.google.com/p/ontology-browser/ Ontology Browser]
+
*Usage guide: [http://code.google.com/p/ontology-browser/wiki/GettingStarted Getting Started]
  
Brief guide: [http://code.google.com/p/ontology-browser/wiki/GettingStarted Getting Started]
+
=The Ontology=
 +
The current published version of the Security and Privacy Ontology will be available for download and hosted browsing as follows. When reviewing, please take note of explanatory comments among the annotations.
  
==Presentations==
+
==Downloads==
An introduction to Description Language, OWL and Protege: [http://gforge.hl7.org/gf/download/docmanfileversion/5561/7128/OWLProt%C3%A9g%C3%A9andSecurity-PrivacyOntology.pdf OWL, Protege and Security-Privacy Ontology]
+
[http://www.hl7.org/implement/standards/product_brief.cfm?product_id=348 HL7 Version 3 Standard: Security and Privacy Ontology, Release 1]
  
==Draft Ontology==
+
The Ontologies zip file contains an ''Ontologies'' directory, which in turn contains a set of OWL files representing the sub-ontologies: [http://gforge.hl7.org/gf/download/docmanfileversion/8003/11714/Ontologies.zip Ontologies.zip]
Updates to the Security and Privacy ontology will be available here.
 
  
===Download===
+
==Hosted Browsing==
The Security and Privacy Ontology is distributed as a zip file containing an ''Ontologies'' directory, a set of OWL files representing the sub-ontologies, and an [http://www.oasis-open.org/committees/entity/spec-2001-08-06.html XML Catalog].  Note that the catalog redirects ontology IRIs to the local file system.  For example, ''http://www.hl7.org/ontologies/SecurityAndPrivacy.owl'', which does not yet exist on the Web, is redirected to the ''SecurityAndPrivacy.owl'' file.
 
 
 
Current published draft of the Security-Privacy Ontology for peer review: [TBD Posted - November 1, 2011]
 
 
 
===Hosted Browsing===
 
 
Apelon is voluntarily hosting the Ontology Browser to facilitate peer review of the Security and Privacy Ontology.  Please respect that purpose.
 
Apelon is voluntarily hosting the Ontology Browser to facilitate peer review of the Security and Privacy Ontology.  Please respect that purpose.
  
 
To browse the current published draft ontology using a Web browser:
 
To browse the current published draft ontology using a Web browser:
# Visit the hosted Ontology Browser: [http://216.47.173.3:8080/browser/ Ontology Browser]
+
# Visit the hosted Ontology Browser: [http://note.ext.apelon.com:8080/browser Ontology Browser]
#Enter a suitable URL in the box labeled ''Specify the physical location of your ontology''.  For example, copy and paste one of the following URLs:
+
# Optionally (but recommended), to view the Ontology as enriched by an OWL reasoner:
#* file://localhost/C:/Ontologies/SecurityAndPrivacy.owl
+
##Click '''Options''' (on the right, towards the top of the page).
#* file://localhost/C:/Ontologies/SomewhereHospital.owl
+
##Select '''HermiT''' from the pulldown list labelled ''Reasoner'' (under ''Model'' on the right).
 +
## Click '''Ontology Browser''' at the top left.
 +
#Enter the URL for an OWL file in the box labeled ''Specify the physical location of your ontology''.  URLs for the Security and Privacy Ontology are shown in the table below. Suggested entries are highlighted in yellow and gold.
 
#Click '''load'''.  
 
#Click '''load'''.  
Notes:
 
*An ''Ontologies'' directory is hosted on the same virtual server as the Ontology Browser. The preceding example URLs will direct the hosted Ontology Browser to OWL files on ''its'' local host (not your local host).
 
*Eventually, HL7 ontologies may be hosted at a well known location such as http://www.hl7.org/ontologies/ (which doesn't currently exist).  In anticipation, the IRIs for sub-ontologies and other elements of the Security and Privacy Ontology embody that location.  Unlike Protégé, the current Ontology Browser software provides no way to redirect such IRIs.  Therefore, we direct the Ontology Browser to the hosted files (having manually edited OWL imports within the hosted files accordingly).
 
  
==Ontology Review Criteria==
+
'''Hints:'''
'''Suggested criteria for interim review of the Security-Privacy Ontology.
+
*Click '''Help''' (at top right) to for further details. See especially [http://code.google.com/p/ontology-browser/wiki/GettingStarted Getting started] under Documentation.
'''
+
*The Ontology Browser generally works well when viewing ontology contents, but there are occasional glitches loading or switching ontologies. Try clearing and reloading ontologies (see below) or restarting your Web browser.
 +
* Click the red box with the white X (near top left) to clear all ontologies.
 +
* Click '''Ontology Browser''' (at top left) to return to the home page, where you can load ontologies.
 +
 
 +
{| class="wikitable"
 +
|-
 +
! Sub-ontology
 +
! URL for hosted Ontology Browser
 +
! Notes
 +
|-
 +
| ClinicalObservationOntology.owl
 +
| FILE://localhost/C:/Ontologies/ClinicalObservationOntology.owl
 +
| <p>Imports SecurityAndPrivacyOntology.owl.</p> <p>Represents sample clinical observations.</p>
 +
|-
 +
| CompartmentOntology.owl
 +
| FILE://localhost/C:/Ontologies/CompartmentOntology.owl
 +
| <p>Imports SecurityAndPrivacyOntology.owl.</p> <p>Represents compartments based on the proposed HL7 v3 Compartment value set.</p>
 +
 
 +
|-
 +
| ConfidentialityOntology.owl
 +
| FILE://localhost/C:/Ontologies/ConfidentialityOntology.owl
 +
| <p>Imports SecurityAndPrivacyOntology.owl.</p> <p>Represents confidentialities based on the HL7 v3 Confidentiality value set (OID = 2.16.840.1.113883.1.11.10228).</p>
 +
|-
 +
| CRUDEA_OperationOntology.owl
 +
| FILE://localhost/C:/Ontologies/CRUDEA_OperationOntology.owl
 +
| <p>Imports SecurityAndPrivacyOntology.owl.</p> <p>Represents Create, Read, Update, Delete, Execute and Append operations from the HL7 RBAC Healthcare Permission Catalog.</p>
 +
|-
 +
| DataOperationOntology.owl
 +
| FILE://localhost/C:/Ontologies/DataOperationOntology.owl
 +
| <p>Imports CRUDEA_OperationOntology.owl.</p> <p>Represents further data operations from the HL7 RBAC Permission Catalog and beyond.</p>
 +
|-
 +
| IntegrityOntology.owl
 +
| FILE://localhost/C:/Ontologies/IntegrityOntology.owl
 +
| <p>Imports SecurityAndPrivacyOntology.owl.</p> <p>Represents integrities based on the HL7 v3 Integrity value set (OID = 2.16.840.1.113883.1.11.20469) [limited to descendants of _SECINTOBV inclusive].</p>
 +
|-
 +
| ObjectOntology.owl
 +
| FILE://localhost/C:/Ontologies/ObjectOntology.owl
 +
| <p>Imports SecurityAndPrivacyOntology.owl.</p> <p>Represents objects from the HL7 RBAC Permission Catalog.</p>
 +
|-
 +
| ObligationOntology.owl
 +
| FILE://localhost/C:/Ontologies/ObligationOntology.owl
 +
| <p>Imports SecurityAndPrivacyOntology.owl.</p> <p>Represents obligations, based on the HL7 v3 Obligation value set (OID = 2.16.840.1.113883.1.11.20445).</p>
 +
|-
 +
| PaymentSourceOntology.owl
 +
| FILE://localhost/C:/Ontologies/PaymentSourceOntology.owl
 +
| <p>Imports SecurityAndPrivacyOntology.owl.</p> <p>Represents payment sources, based on the HL7 v3 ActCoverageTypeCode value set (OID = 2.16.840.1.113883.1.11.19855).</</p>
 +
|-
 +
| PermissionOntology.owl
 +
| FILE://localhost/C:/Ontologies/PermissionOntology.owl
 +
| <p>Imports DataOperationOntology.owl.</p> <p>Imports ObjectOntology.owl.</p> <p>Imports RBAC_Ontology.owl.</p> <p>Represents permissions from the HL7 RBAC Permission Catalog.</p>
 +
|-
 +
| PrivacyOperationOntology.owl
 +
| FILE://localhost/C:/Ontologies/PrivacyOperationOntology.owl
 +
| <p>Imports SecurityAndPrivacyOntology.owl.</p> <p>Represents privacy operations from the CSP-DAM.</p>
 +
|-
 +
| PurposeOfUseOntology.owl
 +
| FILE://localhost/C:/Ontologies/PurposeOfUseOntology.owl
 +
| <p>Imports SecurityAndPrivacyOntology.owl.</p> <p>Represents purposes of use, based on the HL7 v3 PurposeOfUse value set (OID = 2.16.840.1.113883.1.11.20448).</p>
 +
|-
 +
| RBAC_Ontology.owl
 +
| FILE://localhost/C:/Ontologies/RBAC_Ontology.owl
 +
| <p>Imports SecurityAndPrivacyOntology.owl.</p> <p>Represents purely RBAC classes based on ANSI/INCITS 359-2004 and the HL7 RBAC Permission Catalog.  Note that classes imported from SecurityAndPrivacy.owl may come with attributes outside of pure RBAC and/or may add pure RBAC restrictions here.</p>
 +
|-
 +
| RefrainOntology.owl
 +
| FILE://localhost/C:/Ontologies/RefrainOntology.owl
 +
| <p>Imports SecurityAndPrivacyOntology.owl.</p> <p>Represents refrains, based on the HL7 v3 Refrain value set (OID = 2.16.840.1.113883.1.11.20446).</p>
 +
 +
|-
 +
| RoleOntology.owl
 +
| FILE://localhost/C:/Ontologies/RoleOntology.owl
 +
| <p>Imports SecurityAndPrivacyOntology.owl.</p> <p>Represents sample security roles, both structural and functional.</p>
 +
|-
 +
| RouteOntology.owl
 +
| FILE://localhost/C:/Ontologies/RouteOntology.owl
 +
| <p>Imports SecurityAndPrivacyOntology.owl.</p> <p>Represents sample routes.</p>
 +
|- style="background:yellow;"
 +
| SecurityAndPrivacyOntology.owl
 +
| FILE://localhost/C:/Ontologies/SecurityAndPrivacyOntology.owl
 +
| <p>The base HL7 Security and Privacy Ontology.</p>
 +
|-
 +
| SensitivityOntology.owl
 +
| FILE://localhost/C:/Ontologies/SensitivityOntology.owl
 +
| <p>Imports SecurityAndPrivacyOntology.owl.</p> <p>Represents sensitivities based on the HL7 v3 Sensitivity value set (OID = 2.16.840.1.113883.1.11.20429).</p>
 +
|-
 +
| ServiceDeliveryLocationOntology.owl
 +
| FILE://localhost/C:/Ontologies/ServiceDeliveryLocationOntology.owl
 +
| <p>Imports SecurityAndPrivacyOntology.owl.</p> <p>Represents service delivery locations based on the HL7 v3 ServiceDeliveryLocation value set (OID = 2.16.840.1.113883.1.11.17660).</p>
 +
|- style="background:gold;"
 +
| SomewhereHospitalOntology.owl
 +
| FILE://localhost/C:/Ontologies/SomewhereHospitalOntology.owl
 +
| <p>Imports all of the preceding sub-ontologies directly or indirectly.  Thus, enables browsing them together.</p> <p>Represents examples at a local institution, the fictional Somewhere Hospital.</p>  <p>Further instances to be developed.</p><p>To support SWRL rules, adds several classes (whose names begin with *; note that the SWRL rules are not accessible via the Ontology Browser).</p>
 +
|}
 +
 
 +
'''Notes:'''
 +
*An ''Ontologies'' directory is hosted on the same virtual server as the Ontology Browser. The URLs in the preceding table will direct the hosted Ontology Browser to OWL files on its local host (not your local host).
 +
*Eventually, HL7 ontologies may be hosted at a well known location such as http://hl7.org/ontology/ (which doesn't currently exist).  In anticipation, the IRIs for sub-ontologies and other elements of the Security and Privacy Ontology embody that location.  Unlike Protégé, the current Ontology Browser software provides no way to redirect such IRIs.  Therefore, we direct the Ontology Browser to the hosted files (having manually edited OWL imports accordingly within the hosted files).
 +
 
 +
=Ontology Review Criteria=
 +
Suggested criteria for interim review of the Security-Privacy Ontology:
 
*Security-Privacy Ontology Review Criteria: [http://gforge.hl7.org/gf/download/docmanfileversion/5925/7668/Security-PrivacyOntologyReviewCriteria.docx Updated - 10/20/2010]  
 
*Security-Privacy Ontology Review Criteria: [http://gforge.hl7.org/gf/download/docmanfileversion/5925/7668/Security-PrivacyOntologyReviewCriteria.docx Updated - 10/20/2010]  
 
*Security-Privacy Ontology Review Criteria with Forms (to fill in responses):[http://gforge.hl7.org/gf/download/docmanfileversion/5924/7667/Security-PrivacyOntologyReviewCriteriawithForms.docx Updated - 10/20/2010]
 
*Security-Privacy Ontology Review Criteria with Forms (to fill in responses):[http://gforge.hl7.org/gf/download/docmanfileversion/5924/7667/Security-PrivacyOntologyReviewCriteriawithForms.docx Updated - 10/20/2010]
  
==Related Projects==
+
=Related HL7 Projects=
[http://hssp-infrastructure.wikispaces.com/SOA+Service+Ontology+Meetings HL7 SOA Ontology WG]
+
*[http://hssp-infrastructure.wikispaces.com/SOA+Service+Ontology+Meetings HL7 SOA Ontology WG]
  
==Resources==
+
=Resources=
[http://www.w3.org/TR/2009/REC-owl2-overview-20091027/ W3C OWL 2 Specification]<br />
+
*[http://www.w3.org/TR/2009/REC-owl2-overview-20091027/ W3C OWL 2 Specification]<br />
[http://gforge.hl7.org/gf/download/docmanfileversion/5571/7143/ReferenceOntologyforSemanticServiceOrientedArchitectures_Public_Review_1.doc OASIS Reference Ontology for Semantic Service Oriented Architectures]
+
*[http://www.w3.org/Submission/SWRL/ SWRL: A Semantic Web Rule Language Combining OWL and RuleML. ]<br />

Latest revision as of 21:24, 2 June 2015

Back to: Security Main Page

Back to: CBCC Main Page


Introduction

This page provides a focal point for the HL7 Security and Privacy Ontology Project: a hub for connecting to its artifacts, discussions, status and links to related projects and work groups. Most of the technical content for this project will be contained within its artifacts which will be linked via this page and stored on GForge.

Standard

HL7 Version 3 Standard: Security and Privacy Ontology, Release 1

Scope

The scope of the project was defined by the answers to a set of scoping questions.

Project Documentation

Approved Project Scope Statement

Presentations

An introduction to Description Logic, OWL and Protégé:

Overview and Status:

Working Presentations:

Ontology Development Methodology

This methodology has been derived from a guideused by the Protégé team and demonstrates a basic model development process that shares some steps with HL7 HDF. The draft was written from the standpoint of developing an ontology from scratch.

Use Cases

Access Control Based on Category of Action

Access Control Based on Category of Object

Access Control Based on Category of Structural Role

Access Control Based on Category of Functional Role

Access Control Based on Multiple Role Values

Enable Design of Access Control System

Facilitate an Automated Decision Function

Tooling

This project uses the Protégé-OWL Editor for ontology editing and the Ontology Browser for Web-based ontology review.

Protégé-OWL Editor

The Protégé-OWL Editor operates on OWL 2 ontologies. It also handles SWRL. The Security and Privacy Ontology is currently edited with the Protégé 4.3 Release version.

Ontology Browser

The Ontology Browser provides read-only access to OWL 2 ontologies.

The Ontology

The current published version of the Security and Privacy Ontology will be available for download and hosted browsing as follows. When reviewing, please take note of explanatory comments among the annotations.

Downloads

HL7 Version 3 Standard: Security and Privacy Ontology, Release 1

The Ontologies zip file contains an Ontologies directory, which in turn contains a set of OWL files representing the sub-ontologies: Ontologies.zip

Hosted Browsing

Apelon is voluntarily hosting the Ontology Browser to facilitate peer review of the Security and Privacy Ontology. Please respect that purpose.

To browse the current published draft ontology using a Web browser:

  1. Visit the hosted Ontology Browser: Ontology Browser
  2. Optionally (but recommended), to view the Ontology as enriched by an OWL reasoner:
    1. Click Options (on the right, towards the top of the page).
    2. Select HermiT from the pulldown list labelled Reasoner (under Model on the right).
    3. Click Ontology Browser at the top left.
  3. Enter the URL for an OWL file in the box labeled Specify the physical location of your ontology. URLs for the Security and Privacy Ontology are shown in the table below. Suggested entries are highlighted in yellow and gold.
  4. Click load.

Hints:

  • Click Help (at top right) to for further details. See especially Getting started under Documentation.
  • The Ontology Browser generally works well when viewing ontology contents, but there are occasional glitches loading or switching ontologies. Try clearing and reloading ontologies (see below) or restarting your Web browser.
  • Click the red box with the white X (near top left) to clear all ontologies.
  • Click Ontology Browser (at top left) to return to the home page, where you can load ontologies.
Sub-ontology URL for hosted Ontology Browser Notes
ClinicalObservationOntology.owl FILE://localhost/C:/Ontologies/ClinicalObservationOntology.owl

Imports SecurityAndPrivacyOntology.owl.

Represents sample clinical observations.

CompartmentOntology.owl FILE://localhost/C:/Ontologies/CompartmentOntology.owl

Imports SecurityAndPrivacyOntology.owl.

Represents compartments based on the proposed HL7 v3 Compartment value set.

ConfidentialityOntology.owl FILE://localhost/C:/Ontologies/ConfidentialityOntology.owl

Imports SecurityAndPrivacyOntology.owl.

Represents confidentialities based on the HL7 v3 Confidentiality value set (OID = 2.16.840.1.113883.1.11.10228).

CRUDEA_OperationOntology.owl FILE://localhost/C:/Ontologies/CRUDEA_OperationOntology.owl

Imports SecurityAndPrivacyOntology.owl.

Represents Create, Read, Update, Delete, Execute and Append operations from the HL7 RBAC Healthcare Permission Catalog.

DataOperationOntology.owl FILE://localhost/C:/Ontologies/DataOperationOntology.owl

Imports CRUDEA_OperationOntology.owl.

Represents further data operations from the HL7 RBAC Permission Catalog and beyond.

IntegrityOntology.owl FILE://localhost/C:/Ontologies/IntegrityOntology.owl

Imports SecurityAndPrivacyOntology.owl.

Represents integrities based on the HL7 v3 Integrity value set (OID = 2.16.840.1.113883.1.11.20469) [limited to descendants of _SECINTOBV inclusive].

ObjectOntology.owl FILE://localhost/C:/Ontologies/ObjectOntology.owl

Imports SecurityAndPrivacyOntology.owl.

Represents objects from the HL7 RBAC Permission Catalog.

ObligationOntology.owl FILE://localhost/C:/Ontologies/ObligationOntology.owl

Imports SecurityAndPrivacyOntology.owl.

Represents obligations, based on the HL7 v3 Obligation value set (OID = 2.16.840.1.113883.1.11.20445).

PaymentSourceOntology.owl FILE://localhost/C:/Ontologies/PaymentSourceOntology.owl

Imports SecurityAndPrivacyOntology.owl.

Represents payment sources, based on the HL7 v3 ActCoverageTypeCode value set (OID = 2.16.840.1.113883.1.11.19855).</

PermissionOntology.owl FILE://localhost/C:/Ontologies/PermissionOntology.owl

Imports DataOperationOntology.owl.

Imports ObjectOntology.owl.

Imports RBAC_Ontology.owl.

Represents permissions from the HL7 RBAC Permission Catalog.

PrivacyOperationOntology.owl FILE://localhost/C:/Ontologies/PrivacyOperationOntology.owl

Imports SecurityAndPrivacyOntology.owl.

Represents privacy operations from the CSP-DAM.

PurposeOfUseOntology.owl FILE://localhost/C:/Ontologies/PurposeOfUseOntology.owl

Imports SecurityAndPrivacyOntology.owl.

Represents purposes of use, based on the HL7 v3 PurposeOfUse value set (OID = 2.16.840.1.113883.1.11.20448).

RBAC_Ontology.owl FILE://localhost/C:/Ontologies/RBAC_Ontology.owl

Imports SecurityAndPrivacyOntology.owl.

Represents purely RBAC classes based on ANSI/INCITS 359-2004 and the HL7 RBAC Permission Catalog. Note that classes imported from SecurityAndPrivacy.owl may come with attributes outside of pure RBAC and/or may add pure RBAC restrictions here.

RefrainOntology.owl FILE://localhost/C:/Ontologies/RefrainOntology.owl

Imports SecurityAndPrivacyOntology.owl.

Represents refrains, based on the HL7 v3 Refrain value set (OID = 2.16.840.1.113883.1.11.20446).

RoleOntology.owl FILE://localhost/C:/Ontologies/RoleOntology.owl

Imports SecurityAndPrivacyOntology.owl.

Represents sample security roles, both structural and functional.

RouteOntology.owl FILE://localhost/C:/Ontologies/RouteOntology.owl

Imports SecurityAndPrivacyOntology.owl.

Represents sample routes.

SecurityAndPrivacyOntology.owl FILE://localhost/C:/Ontologies/SecurityAndPrivacyOntology.owl

The base HL7 Security and Privacy Ontology.

SensitivityOntology.owl FILE://localhost/C:/Ontologies/SensitivityOntology.owl

Imports SecurityAndPrivacyOntology.owl.

Represents sensitivities based on the HL7 v3 Sensitivity value set (OID = 2.16.840.1.113883.1.11.20429).

ServiceDeliveryLocationOntology.owl FILE://localhost/C:/Ontologies/ServiceDeliveryLocationOntology.owl

Imports SecurityAndPrivacyOntology.owl.

Represents service delivery locations based on the HL7 v3 ServiceDeliveryLocation value set (OID = 2.16.840.1.113883.1.11.17660).

SomewhereHospitalOntology.owl FILE://localhost/C:/Ontologies/SomewhereHospitalOntology.owl

Imports all of the preceding sub-ontologies directly or indirectly. Thus, enables browsing them together.

Represents examples at a local institution, the fictional Somewhere Hospital.

Further instances to be developed.

To support SWRL rules, adds several classes (whose names begin with *; note that the SWRL rules are not accessible via the Ontology Browser).

Notes:

  • An Ontologies directory is hosted on the same virtual server as the Ontology Browser. The URLs in the preceding table will direct the hosted Ontology Browser to OWL files on its local host (not your local host).
  • Eventually, HL7 ontologies may be hosted at a well known location such as http://hl7.org/ontology/ (which doesn't currently exist). In anticipation, the IRIs for sub-ontologies and other elements of the Security and Privacy Ontology embody that location. Unlike Protégé, the current Ontology Browser software provides no way to redirect such IRIs. Therefore, we direct the Ontology Browser to the hosted files (having manually edited OWL imports accordingly within the hosted files).

Ontology Review Criteria

Suggested criteria for interim review of the Security-Privacy Ontology:

Related HL7 Projects

Resources