Connectathon 11 Snapshot

This page is part of the FHIR Specification (v1.2.0: STU 3 Draft). The current version which supercedes this version is 5.0.0. For a full list of available versions, see the Directory of published versions . Page versions: R4 R3 R2

E.1 StructureDefinition: EHRSRLE-AuditEvent

This profile is marked as a draft.

The official URL for this profile is:

http://hl7.org/fhir/StructureDefinition/ehrsrle-auditevent

Defines the elements to be supported within the AuditEvent resource in order to conform with the Electronic Health Record System Functional Model Record Lifecycle Event standard

This profile was published on Thu, Dec 4, 2014 00:00+1100 as a draft by Health Level Seven International (Electronic Health Record).

E.1.1 Formal Views of Profile Content

Description of Profiles, Differentials, Snapshots, and how the XML and JSON presentations work.

This structure is derived from AuditEvent.

Summary

Must-Support: 28 elements

NameFlagsCard.TypeDescription & Constraintsdoco
.. AuditEvent 0..*AuditEventEvent record kept for security purposes
... meta 0..1MetaMetadata about the resource
... implicitRules ?! 0..1uriA set of rules under which this content was created
... language 0..1codeLanguage of the resource content
Binding: IETF BCP-47 (required)
... text I0..1NarrativeText summary of the resource, for human interpretation
... contained 0..*ResourceContained, inline Resources
... extension 0..*ExtensionAdditional Content defined by implementations
... modifierExtension ?!0..*ExtensionExtensions that cannot be ignored
... event S1..1BackboneElementWhat was done
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension ?!0..*ExtensionExtensions that cannot be ignored
.... type S 1..1CodingType/identifier of event
Binding: Audit Event ID (extensible)
.... subtype S 0..*CodingMore specific type/id for the event
Binding: Audit Event Sub-Type (extensible)
.... action S 0..1codeType of action performed during the event
Binding: AuditEventAction (required)
.... dateTime S 1..1instantTime when the event occurred on source
.... outcome 0..1codeWhether the event succeeded or failed
Binding: AuditEventOutcome (required)
.... outcomeDesc 0..1stringDescription of the event outcome
.... purposeOfEvent S 0..*CodingThe purposeOfUse of the event
Binding: PurposeOfUse (extensible)
... participant S1..*BackboneElementA person, a hardware device or software process
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension ?!0..*ExtensionExtensions that cannot be ignored
.... role S0..*CodeableConceptUser roles (e.g. local RBAC codes)
Binding: Audit Active Participant Role ID Code (extensible)
.... reference S 0..1Reference(Practitioner | Organization | Device | Patient | RelatedPerson)Direct reference to resource
.... userId S 0..1IdentifierUnique identifier for the user
.... altId 0..1stringAlternative User id e.g. authentication
.... name 0..1stringHuman-meaningful name for the user
.... requestor S1..1booleanWhether user is initiator
.... location S0..1Reference(Location)Where
.... policy S0..*uriPolicy that authorized event
.... media 0..1CodingType of media
Binding: Media Type Code (extensible)
.... network S0..1BackboneElementLogical network location for application activity
..... extension 0..*ExtensionAdditional Content defined by implementations
..... modifierExtension ?!0..*ExtensionExtensions that cannot be ignored
..... address S0..1stringIdentifier for the network access point of the user device
..... type S0..1codeThe type of network access point
Binding: AuditEventParticipantNetworkType (required)
.... purposeOfUse S0..*CodingReason given for this user
Binding: PurposeOfUse (extensible)
... source S1..1BackboneElementApplication systems and processes
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension ?!0..*ExtensionExtensions that cannot be ignored
.... site S0..1stringLogical source location within the enterprise
.... identifier S 1..1IdentifierThe identity of source detecting the event
.... type S0..*CodingThe type of source where event originated
Binding: Audit Event Source Type (extensible)
... object S I0..*BackboneElementSpecific instances of data or objects that have been accessed
sev-1: Either a name or a query (NOT both)
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension ?!0..*ExtensionExtensions that cannot be ignored
.... identifier S 0..1IdentifierSpecific instance of object (e.g. versioned)
.... reference S 0..1Reference(Resource)Specific instance of resource (e.g. versioned)
.... type S0..1CodingType of object involved
Binding: AuditEventObjectType (extensible)
.... role S0..1CodingWhat role the Object played
Binding: AuditEventObjectRole (extensible)
.... lifecycle S0..1CodingLife-cycle stage for the object
Binding: AuditEventObjectLifecycle (extensible)
.... securityLabel S0..*CodingSecurity labels applied to the object
Binding: All Security Labels (extensible)
.... name I0..1stringInstance-specific descriptor for Object
.... description 0..1stringDescriptive text
.... query I0..1base64BinaryActual query for object
.... detail 0..*BackboneElementAdditional Information about the Object
..... extension 0..*ExtensionAdditional Content defined by implementations
..... modifierExtension ?!0..*ExtensionExtensions that cannot be ignored
..... type 1..1stringName of the property
..... value 1..1base64BinaryProperty value

doco Documentation for this format

todo

This structure is derived from AuditEvent.

Summary

Must-Support: 28 elements

Snapshot View

NameFlagsCard.TypeDescription & Constraintsdoco
.. AuditEvent 0..*AuditEventEvent record kept for security purposes
... meta 0..1MetaMetadata about the resource
... implicitRules ?! 0..1uriA set of rules under which this content was created
... language 0..1codeLanguage of the resource content
Binding: IETF BCP-47 (required)
... text I0..1NarrativeText summary of the resource, for human interpretation
... contained 0..*ResourceContained, inline Resources
... extension 0..*ExtensionAdditional Content defined by implementations
... modifierExtension ?!0..*ExtensionExtensions that cannot be ignored
... event S1..1BackboneElementWhat was done
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension ?!0..*ExtensionExtensions that cannot be ignored
.... type S 1..1CodingType/identifier of event
Binding: Audit Event ID (extensible)
.... subtype S 0..*CodingMore specific type/id for the event
Binding: Audit Event Sub-Type (extensible)
.... action S 0..1codeType of action performed during the event
Binding: AuditEventAction (required)
.... dateTime S 1..1instantTime when the event occurred on source
.... outcome 0..1codeWhether the event succeeded or failed
Binding: AuditEventOutcome (required)
.... outcomeDesc 0..1stringDescription of the event outcome
.... purposeOfEvent S 0..*CodingThe purposeOfUse of the event
Binding: PurposeOfUse (extensible)
... participant S1..*BackboneElementA person, a hardware device or software process
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension ?!0..*ExtensionExtensions that cannot be ignored
.... role S0..*CodeableConceptUser roles (e.g. local RBAC codes)
Binding: Audit Active Participant Role ID Code (extensible)
.... reference S 0..1Reference(Practitioner | Organization | Device | Patient | RelatedPerson)Direct reference to resource
.... userId S 0..1IdentifierUnique identifier for the user
.... altId 0..1stringAlternative User id e.g. authentication
.... name 0..1stringHuman-meaningful name for the user
.... requestor S1..1booleanWhether user is initiator
.... location S0..1Reference(Location)Where
.... policy S0..*uriPolicy that authorized event
.... media 0..1CodingType of media
Binding: Media Type Code (extensible)
.... network S0..1BackboneElementLogical network location for application activity
..... extension 0..*ExtensionAdditional Content defined by implementations
..... modifierExtension ?!0..*ExtensionExtensions that cannot be ignored
..... address S0..1stringIdentifier for the network access point of the user device
..... type S0..1codeThe type of network access point
Binding: AuditEventParticipantNetworkType (required)
.... purposeOfUse S0..*CodingReason given for this user
Binding: PurposeOfUse (extensible)
... source S1..1BackboneElementApplication systems and processes
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension ?!0..*ExtensionExtensions that cannot be ignored
.... site S0..1stringLogical source location within the enterprise
.... identifier S 1..1IdentifierThe identity of source detecting the event
.... type S0..*CodingThe type of source where event originated
Binding: Audit Event Source Type (extensible)
... object S I0..*BackboneElementSpecific instances of data or objects that have been accessed
sev-1: Either a name or a query (NOT both)
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension ?!0..*ExtensionExtensions that cannot be ignored
.... identifier S 0..1IdentifierSpecific instance of object (e.g. versioned)
.... reference S 0..1Reference(Resource)Specific instance of resource (e.g. versioned)
.... type S0..1CodingType of object involved
Binding: AuditEventObjectType (extensible)
.... role S0..1CodingWhat role the Object played
Binding: AuditEventObjectRole (extensible)
.... lifecycle S0..1CodingLife-cycle stage for the object
Binding: AuditEventObjectLifecycle (extensible)
.... securityLabel S0..*CodingSecurity labels applied to the object
Binding: All Security Labels (extensible)
.... name I0..1stringInstance-specific descriptor for Object
.... description 0..1stringDescriptive text
.... query I0..1base64BinaryActual query for object
.... detail 0..*BackboneElementAdditional Information about the Object
..... extension 0..*ExtensionAdditional Content defined by implementations
..... modifierExtension ?!0..*ExtensionExtensions that cannot be ignored
..... type 1..1stringName of the property
..... value 1..1base64BinaryProperty value

doco Documentation for this format

XML Template

JSON Template

todo

 

Other representations of profile: Schematron

E.1.2 Terminology Bindings

PathNameConformanceValueSet
AuditEvent.language?extrequiredhttp://tools.ietf.org/html/bcp47
AuditEvent.event.typeAudit Event IDextensibleAudit Event ID
AuditEvent.event.subtypeAudit Event Sub-TypeextensibleAudit Event Sub-Type
AuditEvent.event.actionAuditEventActionrequiredAuditEventAction
AuditEvent.event.outcomeAuditEventOutcomerequiredAuditEventOutcome
AuditEvent.event.purposeOfEventPurposeOfUseextensiblePurposeOfUse
AuditEvent.participant.roleAudit Active Participant Role ID CodeextensibleAudit Active Participant Role ID Code
AuditEvent.participant.mediaMedia Type CodeextensibleMedia Type Code
AuditEvent.participant.network.typeAuditEventParticipantNetworkTyperequiredAuditEventParticipantNetworkType
AuditEvent.participant.purposeOfUsePurposeOfUseextensiblePurposeOfUse
AuditEvent.source.typeAudit Event Source TypeextensibleAudit Event Source Type
AuditEvent.object.typeAuditEventObjectTypeextensibleAuditEventObjectType
AuditEvent.object.roleAuditEventObjectRoleextensibleAuditEventObjectRole
AuditEvent.object.lifecycleAuditEventObjectLifecycleextensibleAuditEventObjectLifecycle
AuditEvent.object.securityLabelAll Security LabelsextensibleAll Security Labels

E.1.3 Constraints

IdPathDetailsRequirements
sev-1AuditEvent.objectEither a name or a query (NOT both)
XPath: not(exists(f:name)) or not(exists(f:query))
.