Uploaded image for project: 'FHIR Specification Feedback'
  1. FHIR Specification Feedback
  2. FHIR-30723

User to system athentication and authorization are appropriate for the knowledge management transaction.

    XMLWordPrintableJSON

Details

    • Icon: Change Request Change Request
    • Resolution: Persuasive with Modification
    • Icon: Highest Highest
    • US Making EHR Data More available for Research and Public Health (MedMorph) (FHIR)
    • 0.1.0
    • Public Health
    • Detailed Specification
    • 5.1.6
    • Hide

      For Knowledge Artifacts which do not contain any PII, PHI or other organizational sensitive information, the specification will be simplified to follow Security Best practices outlined in the FHIR base specification.
      For transactions involving Knowledge Artifacts with PII, PHI, etc, the SMART on FHIR Backend Services should be used. For example, Health Care Surveys may want to publish sampled providers via the Knowledge Artifact Repository.

      Show
      For Knowledge Artifacts which do not contain any PII, PHI or other organizational sensitive information, the specification will be simplified to follow Security Best practices outlined in the FHIR base specification. For transactions involving Knowledge Artifacts with PII, PHI, etc, the SMART on FHIR Backend Services should be used. For example, Health Care Surveys may want to publish sampled providers via the Knowledge Artifact Repository.
    • Becky Angeles / Maria Michaels : 32-0-3
    • Correction
    • Compatible, substantive

    Description

      The security for the Knowledge Artifact exchange transaction does not need to be as robust as is described here. Using this level of authentication will restrict access and add to the complexity of operations. Existing implementations use eaasier to manage user to system authentication as a final sign off is needed on knlwedge artifacts before operational implememtation.

      Existing Wording:

      This section outlines how the SMART on FHIR Backend Services Authorization will be used by the MedMorph Reference Architecture implementation guide.

      Proposed Wording:

      In accordance with ballot comment

      (Comment 49 - imported by: Jean Duteau)

      Attachments

        Activity

          People

            nageshbashyam Nagesh Bashyam
            lconn Laura Conn
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: