STU 3 Candidate

This page is part of the FHIR Specification (v1.4.0: STU 3 Ballot 3). The current version which supercedes this version is 5.0.0. For a full list of available versions, see the Directory of published versions . Page versions: R4 R3 R2

E.1 StructureDefinition: EHRSRLE-AuditEvent

This profile is marked as a draft.

The official URL for this profile is: 

http://hl7.org/fhir/StructureDefinition/ehrsrle-auditevent

Defines the elements to be supported within the AuditEvent resource in order to conform with the Electronic Health Record System Functional Model Record Lifecycle Event standard

This profile was published on Thu, Dec 4, 2014 00:00+1100 as a draft by Health Level Seven International (Electronic Health Record).

E.1.1 Formal Views of Profile Content

Description of Profiles, Differentials, Snapshots, and how the XML and JSON presentations work.

This structure is derived from AuditEvent.

Summary

Must-Support: 28 elements

NameFlagsCard.TypeDescription & Constraintsdoco
.. AuditEvent 0..*AuditEventEvent record kept for security purposes
... meta ∑0..1MetaMetadata about the resource
... implicitRules ?! ∑0..1uriA set of rules under which this content was created
... language 0..1codeLanguage of the resource content
Binding: IETF BCP-47 (required)
... text I0..1NarrativeText summary of the resource, for human interpretation
... contained 0..*ResourceContained, inline Resources
... extension 0..*ExtensionAdditional Content defined by implementations
... modifierExtension ?!0..*ExtensionExtensions that cannot be ignored
... type ∑1..1CodingType/identifier of event
Binding: Audit Event ID (extensible)
... subtype ∑0..*CodingMore specific type/id for the event
Binding: Audit Event Sub-Type (extensible)
... action ∑0..1codeType of action performed during the event
Binding: AuditEventAction (required)
... recorded ∑1..1instantTime when the event occurred on source
... outcome ∑0..1codeWhether the event succeeded or failed
Binding: AuditEventOutcome (required)
... outcomeDesc ∑0..1stringDescription of the event outcome
... purposeOfEvent ∑0..*CodingThe purposeOfUse of the event
Binding: PurposeOfUse (extensible)
... agent 1..*BackboneElementActor involved in the event
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension ?! ∑0..*ExtensionExtensions that cannot be ignored
.... role 0..*CodeableConceptAgent role in the event
Binding: Audit Active Participant Role ID Code (extensible)
.... reference ∑0..1Reference(Practitioner | Organization | Device | Patient | RelatedPerson)Direct reference to resource
.... userId ∑0..1IdentifierUnique identifier for the user
.... altId 0..1stringAlternative User id e.g. authentication
.... name 0..1stringHuman-meaningful name for the agent
.... requestor 1..1booleanWhether user is initiator
.... location 0..1Reference(Location)Where
.... policy 0..*uriPolicy that authorized event
.... media 0..1CodingType of media
Binding: Media Type Code (extensible)
.... network 0..1BackboneElementLogical network location for application activity
..... extension 0..*ExtensionAdditional Content defined by implementations
..... modifierExtension ?! ∑0..*ExtensionExtensions that cannot be ignored
..... address 0..1stringIdentifier for the network access point of the user device
..... type 0..1codeThe type of network access point
Binding: AuditEventParticipantNetworkType (required)
.... purposeOfUse 0..*CodingReason given for this user
Binding: PurposeOfUse (extensible)
... source S1..1BackboneElementApplication systems and processes
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension ?! ∑0..*ExtensionExtensions that cannot be ignored
.... site S0..1stringLogical source location within the enterprise
.... identifier S ∑1..1IdentifierThe identity of source detecting the event
.... type S0..*CodingThe type of source where event originated
Binding: Audit Event Source Type (extensible)
... entity I0..*BackboneElementSpecific instances of data or objects that have been accessed
sev-1: Either a name or a query (NOT both)
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension ?! ∑0..*ExtensionExtensions that cannot be ignored
.... identifier ∑0..1IdentifierSpecific instance of object (e.g. versioned)
.... reference ∑0..1Reference(Resource)Specific instance of resource (e.g. versioned)
.... type 0..1CodingType of object involved
Binding: AuditEventObjectType (extensible)
.... role 0..1CodingWhat role the entity played
Binding: AuditEventObjectRole (extensible)
.... lifecycle 0..1CodingLife-cycle stage for the object
Binding: AuditEventObjectLifecycle (extensible)
.... securityLabel 0..*CodingSecurity labels applied to the object
Binding: All Security Labels (extensible)
.... name ∑ I0..1stringDescriptor for entity
.... description 0..1stringDescriptive text
.... query ∑ I0..1base64BinaryQuery parameters
.... detail 0..*BackboneElementAdditional Information about the entity
..... extension 0..*ExtensionAdditional Content defined by implementations
..... modifierExtension ?! ∑0..*ExtensionExtensions that cannot be ignored
..... type 1..1stringName of the property
..... value 1..1base64BinaryProperty value

doco Documentation for this format

todo

This structure is derived from AuditEvent.

Summary

Must-Support: 28 elements

Snapshot View

NameFlagsCard.TypeDescription & Constraintsdoco
.. AuditEvent 0..*AuditEventEvent record kept for security purposes
... meta ∑0..1MetaMetadata about the resource
... implicitRules ?! ∑0..1uriA set of rules under which this content was created
... language 0..1codeLanguage of the resource content
Binding: IETF BCP-47 (required)
... text I0..1NarrativeText summary of the resource, for human interpretation
... contained 0..*ResourceContained, inline Resources
... extension 0..*ExtensionAdditional Content defined by implementations
... modifierExtension ?!0..*ExtensionExtensions that cannot be ignored
... type ∑1..1CodingType/identifier of event
Binding: Audit Event ID (extensible)
... subtype ∑0..*CodingMore specific type/id for the event
Binding: Audit Event Sub-Type (extensible)
... action ∑0..1codeType of action performed during the event
Binding: AuditEventAction (required)
... recorded ∑1..1instantTime when the event occurred on source
... outcome ∑0..1codeWhether the event succeeded or failed
Binding: AuditEventOutcome (required)
... outcomeDesc ∑0..1stringDescription of the event outcome
... purposeOfEvent ∑0..*CodingThe purposeOfUse of the event
Binding: PurposeOfUse (extensible)
... agent 1..*BackboneElementActor involved in the event
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension ?! ∑0..*ExtensionExtensions that cannot be ignored
.... role 0..*CodeableConceptAgent role in the event
Binding: Audit Active Participant Role ID Code (extensible)
.... reference ∑0..1Reference(Practitioner | Organization | Device | Patient | RelatedPerson)Direct reference to resource
.... userId ∑0..1IdentifierUnique identifier for the user
.... altId 0..1stringAlternative User id e.g. authentication
.... name 0..1stringHuman-meaningful name for the agent
.... requestor 1..1booleanWhether user is initiator
.... location 0..1Reference(Location)Where
.... policy 0..*uriPolicy that authorized event
.... media 0..1CodingType of media
Binding: Media Type Code (extensible)
.... network 0..1BackboneElementLogical network location for application activity
..... extension 0..*ExtensionAdditional Content defined by implementations
..... modifierExtension ?! ∑0..*ExtensionExtensions that cannot be ignored
..... address 0..1stringIdentifier for the network access point of the user device
..... type 0..1codeThe type of network access point
Binding: AuditEventParticipantNetworkType (required)
.... purposeOfUse 0..*CodingReason given for this user
Binding: PurposeOfUse (extensible)
... source S1..1BackboneElementApplication systems and processes
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension ?! ∑0..*ExtensionExtensions that cannot be ignored
.... site S0..1stringLogical source location within the enterprise
.... identifier S ∑1..1IdentifierThe identity of source detecting the event
.... type S0..*CodingThe type of source where event originated
Binding: Audit Event Source Type (extensible)
... entity I0..*BackboneElementSpecific instances of data or objects that have been accessed
sev-1: Either a name or a query (NOT both)
.... extension 0..*ExtensionAdditional Content defined by implementations
.... modifierExtension ?! ∑0..*ExtensionExtensions that cannot be ignored
.... identifier ∑0..1IdentifierSpecific instance of object (e.g. versioned)
.... reference ∑0..1Reference(Resource)Specific instance of resource (e.g. versioned)
.... type 0..1CodingType of object involved
Binding: AuditEventObjectType (extensible)
.... role 0..1CodingWhat role the entity played
Binding: AuditEventObjectRole (extensible)
.... lifecycle 0..1CodingLife-cycle stage for the object
Binding: AuditEventObjectLifecycle (extensible)
.... securityLabel 0..*CodingSecurity labels applied to the object
Binding: All Security Labels (extensible)
.... name ∑ I0..1stringDescriptor for entity
.... description 0..1stringDescriptive text
.... query ∑ I0..1base64BinaryQuery parameters
.... detail 0..*BackboneElementAdditional Information about the entity
..... extension 0..*ExtensionAdditional Content defined by implementations
..... modifierExtension ?! ∑0..*ExtensionExtensions that cannot be ignored
..... type 1..1stringName of the property
..... value 1..1base64BinaryProperty value

doco Documentation for this format

XML Template

JSON Template

todo

 

Other representations of profile: Schematron

E.1.2 Terminology Bindings

PathNameConformanceValueSet
AuditEvent.language?extrequiredhttp://tools.ietf.org/html/bcp47
AuditEvent.typeAudit Event IDextensibleAudit Event ID
AuditEvent.subtypeAudit Event Sub-TypeextensibleAudit Event Sub-Type
AuditEvent.actionAuditEventActionrequiredAuditEventAction
AuditEvent.outcomeAuditEventOutcomerequiredAuditEventOutcome
AuditEvent.purposeOfEventPurposeOfUseextensiblePurposeOfUse
AuditEvent.agent.roleAudit Active Participant Role ID CodeextensibleAudit Active Participant Role ID Code
AuditEvent.agent.mediaMedia Type CodeextensibleMedia Type Code
AuditEvent.agent.network.typeAuditEventParticipantNetworkTyperequiredAuditEventParticipantNetworkType
AuditEvent.agent.purposeOfUsePurposeOfUseextensiblePurposeOfUse
AuditEvent.source.typeAudit Event Source TypeextensibleAudit Event Source Type
AuditEvent.entity.typeAuditEventObjectTypeextensibleAuditEventObjectType
AuditEvent.entity.roleAuditEventObjectRoleextensibleAuditEventObjectRole
AuditEvent.entity.lifecycleAuditEventObjectLifecycleextensibleAuditEventObjectLifecycle
AuditEvent.entity.securityLabelAll Security LabelsextensibleAll Security Labels

E.1.3 Constraints

IdPathDetailsRequirements
sev-1AuditEvent.entityEither a name or a query (NOT both)
XPath: not(exists(f:name)) or not(exists(f:query))
.