2nd DSTU Draft For Comment

This page is part of the FHIR Specification (v0.4.0: DSTU 2 Draft). The current version which supercedes this version is 5.0.0. For a full list of available versions, see the Directory of published versions

Profile: EHRSecurityEvent

The official URL for this profile is: 

http://hl7.org/fhir/Profile/securityevent-ehrs-rle-ehrsecurityevent

. Defines the elements to be supported within the SecurityEvent resource in order to conform with the Electronic Health Record System Functional Model Record Lifecycle Event standard : EHRS FM Record Lifecycle Event - Security Event

This profile was published on Thu, Dec 4, 2014 00:00+1100 as a draft by Health Level Seven, Inc. - EHR WG.

unable to summarise extension (wrong count)

Formal Views of Profile Content

Description of Profiles, Differentials, Snapshots, and how the XML and JSON presentations work.

Differential View

This structure is derived from SecurityEvent.

NameFlagsCard.TypeDescription & Constraintsdoco
.. SecurityEvent 1..1
... event S1..1
.... type S1..1
.... subtype S0..*
.... action S0..1
.... dateTime S1..1
.... securityevent-ehrs-rle-location S0..1LocationWhere the activity occurred, if relevant
.... securityevent-ehrs-rle-reason S0..1CodeableConceptReason activity is occurring
.... securityevent-ehrs-rle-policy S0..1uriPolicy or plan th eactivity was defined by
... participant S1..*
.... role S0..*
.... reference S0..1
.... userId S0..1
.... requestor S1..1
.... network S0..1
..... identifier S0..1
..... type S0..1
... source S1..1
.... site S0..1
.... identifier S1..1
.... type S1..1
... object S0..*
.... identifier S0..1
.... reference S0..1
.... type S0..1
.... role S0..1
.... lifecycle S0..1
.... sensitivity S0..1

Snapshot View

NameFlagsCard.TypeDescription & Constraintsdoco
.. SecurityEvent 1..1Event record kept for security purposes
... id 0..1idLogical id of this artefact
... meta 0..1MetaMetadata about the resource
... implicitRules M0..1uriA set of rules under which this content was created
... language 0..1codeLanguage of the resource content
Binding: Language (required, not extensible)
... text I0..1NarrativeText summary of the resource, for human interpretation
... contained 0..*ResourceContained, inline Resources
... extension 0..*ExtensionAdditional Content defined by implementations
... modifierExtension 0..*ExtensionExtensions that cannot be ignored
... event S1..1What was done
.... id 0..1idxml:id (or equivalent in JSON)
.... securityevent-ehrs-rle-location S0..1LocationAdditional Content defined by implementations
.... securityevent-ehrs-rle-reason S0..1CodeableConceptAdditional Content defined by implementations
.... securityevent-ehrs-rle-policy S0..1uriAdditional Content defined by implementations
.... modifierExtension 0..*ExtensionExtensions that cannot be ignored
.... type S1..1CodeableConceptType/identifier of event
Binding: SecurityEventType (preferred, extensible)
.... subtype S0..*CodeableConceptMore specific type/id for the event
Binding: SecurityEventSubType (preferred, extensible)
.... action S0..1codeType of action performed during the event
Binding: SecurityEventAction (required, not extensible)
.... dateTime S1..1instantTime when the event occurred on source
.... outcome 0..1codeWhether the event succeeded or failed
Binding: SecurityEventOutcome (required, not extensible)
.... outcomeDesc 0..1stringDescription of the event outcome
... participant S I1..*A person, a hardware device or software process
sev-3: Either a userId or a reference, but not both
.... id 0..1idxml:id (or equivalent in JSON)
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension 0..*ExtensionExtensions that cannot be ignored
.... role S0..*CodeableConceptUser roles (e.g. local RBAC codes)
Binding: DICOMRoleId (preferred, extensible)
.... reference S I0..1Practitioner, Patient, DeviceDirect reference to resource
.... userId S I0..1stringUnique identifier for the user
.... altId 0..1stringAlternative User id e.g. authentication
.... name 0..1stringHuman-meaningful name for the user
.... requestor S1..1booleanWhether user is initiator
.... media 0..1CodingType of media
.... network S0..1Logical network location for application activity
..... id 0..1idxml:id (or equivalent in JSON)
..... extension 0..*ExtensionAdditional Content defined by implementations
..... modifierExtension 0..*ExtensionExtensions that cannot be ignored
..... identifier S0..1stringIdentifier for the network access point of the user device
..... type S0..1codeThe type of network access point
Binding: SecurityEventParticipantNetworkType (required, not extensible)
... source S1..1Application systems and processes
.... id 0..1idxml:id (or equivalent in JSON)
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension 0..*ExtensionExtensions that cannot be ignored
.... site S0..1stringLogical source location within the enterprise
.... identifier S1..1stringThe id of source where event originated
.... type S1..1CodingThe type of source where event originated
Binding: SecurityEventSourceType (preferred, extensible)
... object S I0..*Specific instances of data or objects that have been accessed
sev-2: Either an identifier or a reference, but not both
sev-1: Either a name or a query (or both)
.... id 0..1idxml:id (or equivalent in JSON)
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension 0..*ExtensionExtensions that cannot be ignored
.... identifier S I0..1IdentifierSpecific instance of object (e.g. versioned)
.... reference S I0..1AnySpecific instance of resource (e.g. versioned)
.... type S0..1codeObject type being audited
Binding: SecurityEventObjectType (required, not extensible)
.... role S0..1codeFunctional application role of Object
Binding: SecurityEventObjectRole (required, not extensible)
.... lifecycle S0..1codeLife-cycle stage for the object
Binding: SecurityEventObjectLifecycle (required, not extensible)
.... sensitivity S0..1CodeableConceptPolicy-defined sensitivity for the object
Binding: SecurityEventObjectSensitivity (example, extensible)
.... name I0..1stringInstance-specific descriptor for Object
.... description 0..1stringDescriptive text
.... query I0..1base64BinaryActual query for object
.... detail 0..*Additional Information about the Object
..... id 0..1idxml:id (or equivalent in JSON)
..... extension 0..*ExtensionAdditional Content defined by implementations
..... modifierExtension 0..*ExtensionExtensions that cannot be ignored
..... type 1..1stringName of the property
..... value 1..1base64BinaryProperty value

XML Template

JSON Template

todo

Differential View

This structure is derived from SecurityEvent.

NameFlagsCard.TypeDescription & Constraintsdoco
.. SecurityEvent 1..1
... event S1..1
.... type S1..1
.... subtype S0..*
.... action S0..1
.... dateTime S1..1
.... securityevent-ehrs-rle-location S0..1LocationWhere the activity occurred, if relevant
.... securityevent-ehrs-rle-reason S0..1CodeableConceptReason activity is occurring
.... securityevent-ehrs-rle-policy S0..1uriPolicy or plan th eactivity was defined by
... participant S1..*
.... role S0..*
.... reference S0..1
.... userId S0..1
.... requestor S1..1
.... network S0..1
..... identifier S0..1
..... type S0..1
... source S1..1
.... site S0..1
.... identifier S1..1
.... type S1..1
... object S0..*
.... identifier S0..1
.... reference S0..1
.... type S0..1
.... role S0..1
.... lifecycle S0..1
.... sensitivity S0..1

Snapshot View

NameFlagsCard.TypeDescription & Constraintsdoco
.. SecurityEvent 1..1Event record kept for security purposes
... id 0..1idLogical id of this artefact
... meta 0..1MetaMetadata about the resource
... implicitRules M0..1uriA set of rules under which this content was created
... language 0..1codeLanguage of the resource content
Binding: Language (required, not extensible)
... text I0..1NarrativeText summary of the resource, for human interpretation
... contained 0..*ResourceContained, inline Resources
... extension 0..*ExtensionAdditional Content defined by implementations
... modifierExtension 0..*ExtensionExtensions that cannot be ignored
... event S1..1What was done
.... id 0..1idxml:id (or equivalent in JSON)
.... securityevent-ehrs-rle-location S0..1LocationAdditional Content defined by implementations
.... securityevent-ehrs-rle-reason S0..1CodeableConceptAdditional Content defined by implementations
.... securityevent-ehrs-rle-policy S0..1uriAdditional Content defined by implementations
.... modifierExtension 0..*ExtensionExtensions that cannot be ignored
.... type S1..1CodeableConceptType/identifier of event
Binding: SecurityEventType (preferred, extensible)
.... subtype S0..*CodeableConceptMore specific type/id for the event
Binding: SecurityEventSubType (preferred, extensible)
.... action S0..1codeType of action performed during the event
Binding: SecurityEventAction (required, not extensible)
.... dateTime S1..1instantTime when the event occurred on source
.... outcome 0..1codeWhether the event succeeded or failed
Binding: SecurityEventOutcome (required, not extensible)
.... outcomeDesc 0..1stringDescription of the event outcome
... participant S I1..*A person, a hardware device or software process
sev-3: Either a userId or a reference, but not both
.... id 0..1idxml:id (or equivalent in JSON)
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension 0..*ExtensionExtensions that cannot be ignored
.... role S0..*CodeableConceptUser roles (e.g. local RBAC codes)
Binding: DICOMRoleId (preferred, extensible)
.... reference S I0..1Practitioner, Patient, DeviceDirect reference to resource
.... userId S I0..1stringUnique identifier for the user
.... altId 0..1stringAlternative User id e.g. authentication
.... name 0..1stringHuman-meaningful name for the user
.... requestor S1..1booleanWhether user is initiator
.... media 0..1CodingType of media
.... network S0..1Logical network location for application activity
..... id 0..1idxml:id (or equivalent in JSON)
..... extension 0..*ExtensionAdditional Content defined by implementations
..... modifierExtension 0..*ExtensionExtensions that cannot be ignored
..... identifier S0..1stringIdentifier for the network access point of the user device
..... type S0..1codeThe type of network access point
Binding: SecurityEventParticipantNetworkType (required, not extensible)
... source S1..1Application systems and processes
.... id 0..1idxml:id (or equivalent in JSON)
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension 0..*ExtensionExtensions that cannot be ignored
.... site S0..1stringLogical source location within the enterprise
.... identifier S1..1stringThe id of source where event originated
.... type S1..1CodingThe type of source where event originated
Binding: SecurityEventSourceType (preferred, extensible)
... object S I0..*Specific instances of data or objects that have been accessed
sev-2: Either an identifier or a reference, but not both
sev-1: Either a name or a query (or both)
.... id 0..1idxml:id (or equivalent in JSON)
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension 0..*ExtensionExtensions that cannot be ignored
.... identifier S I0..1IdentifierSpecific instance of object (e.g. versioned)
.... reference S I0..1AnySpecific instance of resource (e.g. versioned)
.... type S0..1codeObject type being audited
Binding: SecurityEventObjectType (required, not extensible)
.... role S0..1codeFunctional application role of Object
Binding: SecurityEventObjectRole (required, not extensible)
.... lifecycle S0..1codeLife-cycle stage for the object
Binding: SecurityEventObjectLifecycle (required, not extensible)
.... sensitivity S0..1CodeableConceptPolicy-defined sensitivity for the object
Binding: SecurityEventObjectSensitivity (example, extensible)
.... name I0..1stringInstance-specific descriptor for Object
.... description 0..1stringDescriptive text
.... query I0..1base64BinaryActual query for object
.... detail 0..*Additional Information about the Object
..... id 0..1idxml:id (or equivalent in JSON)
..... extension 0..*ExtensionAdditional Content defined by implementations
..... modifierExtension 0..*ExtensionExtensions that cannot be ignored
..... type 1..1stringName of the property
..... value 1..1base64BinaryProperty value

XML Template

JSON Template

todo

 

Other definitions: (todo)

Terminology Bindings

PathNameConformanceValueSet
SecurityEvent.languageLanguagerequiredhttp://tools.ietf.org/html/bcp47
SecurityEvent.event.typeSecurityEventTypepreferred (extensible)Audit Event ID
SecurityEvent.event.subtypeSecurityEventSubTypepreferred (extensible)Security Event Sub-Type
SecurityEvent.event.actionSecurityEventActionrequiredSecurityEventAction
SecurityEvent.event.outcomeSecurityEventOutcomerequiredSecurityEventOutcome
SecurityEvent.participant.roleDICOMRoleIdpreferred (extensible)Audit Active Participant Role ID Code
SecurityEvent.participant.network.typeSecurityEventParticipantNetworkTyperequiredSecurityEventParticipantNetworkType
SecurityEvent.source.typeSecurityEventSourceTypepreferred (extensible)Security Event Source Type
SecurityEvent.object.typeSecurityEventObjectTyperequiredSecurityEventObjectType
SecurityEvent.object.roleSecurityEventObjectRolerequiredSecurityEventObjectRole
SecurityEvent.object.lifecycleSecurityEventObjectLifecyclerequiredSecurityEventObjectLifecycle
SecurityEvent.object.sensitivitySecurityEventObjectSensitivityexample (extensible)Security Event Object Sensitivity

Constraints

IdPathNameDetails
sev-3SecurityEvent.participantParticipant IdentificationEither a userId or a reference, but not both
XPath: exists(f:userId) != exists(f:reference)
sev-2SecurityEvent.objectObject IdentificationEither an identifier or a reference, but not both
XPath: exists(f:identifier) != exists(f:reference)
sev-1SecurityEvent.objectObject NameEither a name or a query (or both)
XPath: not(exists(f:name)) or not(exists(f:query))
.