This page is part of the National Directory of Healthcare Providers and Services (NDH) Implementation Guide (v1.0.0: STU1) based on FHIR (HL7® FHIR® Standard) R4. This is the current published version. For a full list of available versions, see the Directory of published versions

• Narrative Content
• XML
• JSON
• TTL

: Endpoint Access Control Mechanism Code System - TTL Representation

Raw ttl | Download

@prefix fhir: <http://hl7.org/fhir/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

# - resource -------------------------------------------------------------------

 a fhir:CodeSystem ;
  fhir:nodeRole fhir:treeRoot ;
  fhir:id [ fhir:v "EndpointAccessControlMechanismCS"] ; # 
  fhir:text [
fhir:status [ fhir:v "generated" ] ;
fhir:div "<div xmlns=\"http://www.w3.org/1999/xhtml\"><p class=\"res-header-id\"><b>Generated Narrative: CodeSystem EndpointAccessControlMechanismCS</b></p><a name=\"EndpointAccessControlMechanismCS\"> </a><a name=\"hcEndpointAccessControlMechanismCS\"> </a><a name=\"EndpointAccessControlMechanismCS-en-US\"> </a><p>This case-sensitive code system <code>http://hl7.org/fhir/us/ndh/CodeSystem/EndpointAccessControlMechanismCS</code> defines the following codes:</p><table class=\"codes\"><tr><td style=\"white-space:nowrap\"><b>Code</b></td><td><b>Display</b></td><td><b>Definition</b></td></tr><tr><td style=\"white-space:nowrap\">public<a name=\"EndpointAccessControlMechanismCS-public\"> </a></td><td>Public</td><td>Public access without any specific access control.</td></tr><tr><td style=\"white-space:nowrap\">OAuth<a name=\"EndpointAccessControlMechanismCS-OAuth\"> </a></td><td>OAuth</td><td>OAuth (unspecified version see oauth.net).</td></tr><tr><td style=\"white-space:nowrap\">SMART-on-FHIR<a name=\"EndpointAccessControlMechanismCS-SMART-on-FHIR\"> </a></td><td>SMART-on-FHIR</td><td>OAuth2 using SMART-on-FHIR profile (see http://docs.smarthealthit.org/).</td></tr><tr><td style=\"white-space:nowrap\">NTLM<a name=\"EndpointAccessControlMechanismCS-NTLM\"> </a></td><td>NTLM</td><td>Microsoft NTLM Authentication.</td></tr><tr><td style=\"white-space:nowrap\">basic<a name=\"EndpointAccessControlMechanismCS-basic\"> </a></td><td>Basic</td><td>Basic authentication defined in HTTP specification.</td></tr><tr><td style=\"white-space:nowrap\">Kerberos<a name=\"EndpointAccessControlMechanismCS-Kerberos\"> </a></td><td>Kerberos</td><td>see http://www.ietf.org/rfc/rfc4120.txt.</td></tr><tr><td style=\"white-space:nowrap\">Certificates<a name=\"EndpointAccessControlMechanismCS-Certificates\"> </a></td><td>Certificates</td><td>SSL where client must have a certificate registered with the server.</td></tr><tr><td style=\"white-space:nowrap\">opaque-access-token<a name=\"EndpointAccessControlMechanismCS-opaque-access-token\"> </a></td><td>Opaque Access Token</td><td>Uses an opaque token for access control, which is a token whose structure is not visible or meaningful to the client.</td></tr><tr><td style=\"white-space:nowrap\">jwt-access-token<a name=\"EndpointAccessControlMechanismCS-jwt-access-token\"> </a></td><td>JWT Access Token</td><td>Uses a JSON Web Token (JWT) for access control, which is a compact, URL-safe means of representing claims to be transferred between two parties.</td></tr><tr><td style=\"white-space:nowrap\">mutual-tls<a name=\"EndpointAccessControlMechanismCS-mutual-tls\"> </a></td><td>Mutual TLS</td><td>Uses mutual Transport Layer Security (TLS) where both client and server authenticate each other using certificates.</td></tr><tr><td style=\"white-space:nowrap\">wss-saml-token<a name=\"EndpointAccessControlMechanismCS-wss-saml-token\"> </a></td><td>WSS SAML Token</td><td>Uses a Security Assertion Markup Language (SAML) token within the Web Services Security (WSS) framework for access control.</td></tr><tr><td style=\"white-space:nowrap\">wss-username-token<a name=\"EndpointAccessControlMechanismCS-wss-username-token\"> </a></td><td>WSS User Name Token</td><td>Uses a username token within the WSS framework for access control.</td></tr><tr><td style=\"white-space:nowrap\">wss-kerberos-token<a name=\"EndpointAccessControlMechanismCS-wss-kerberos-token\"> </a></td><td>WSS Kerberos Token</td><td>Uses a Kerberos token within the WSS framework for access control.</td></tr><tr><td style=\"white-space:nowrap\">wss-x509-token<a name=\"EndpointAccessControlMechanismCS-wss-x509-token\"> </a></td><td>WSS X509 Token</td><td>Uses an X.509 certificate token within the WSS framework for access control.</td></tr><tr><td style=\"white-space:nowrap\">wss-custom-token<a name=\"EndpointAccessControlMechanismCS-wss-custom-token\"> </a></td><td>WSS Custom Token</td><td>Uses a custom token within the WSS framework for access control.</td></tr></table></div>"^^rdf:XMLLiteral
  ] ; # 
  fhir:extension ( [
fhir:url [ fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-wg"^^xsd:anyURI ] ;
fhir:value [
a fhir:code ;
fhir:v "pa"     ]
  ] [
fhir:url [ fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status"^^xsd:anyURI ] ;
fhir:value [
a fhir:code ;
fhir:v "trial-use" ;
      ( fhir:extension [
fhir:url [ fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom"^^xsd:anyURI ] ;
fhir:value [
a fhir:canonical ;
fhir:v "http://hl7.org/fhir/us/ndh/ImplementationGuide/hl7.fhir.us.ndh"^^xsd:anyURI ;
fhir:link <http://hl7.org/fhir/us/ndh/ImplementationGuide/hl7.fhir.us.ndh>         ]       ] )     ]
  ] ) ; # 
  fhir:url [ fhir:v "http://hl7.org/fhir/us/ndh/CodeSystem/EndpointAccessControlMechanismCS"^^xsd:anyURI] ; # 
  fhir:version [ fhir:v "1.0.0"] ; # 
  fhir:name [ fhir:v "EndpointAccessControlMechanismCS"] ; # 
  fhir:title [ fhir:v "Endpoint Access Control Mechanism Code System"] ; # 
  fhir:status [ fhir:v "active"] ; # 
  fhir:experimental [ fhir:v false] ; # 
  fhir:date [ fhir:v "2025-04-10T14:12:18+00:00"^^xsd:dateTime] ; # 
  fhir:publisher [ fhir:v "HL7 International / Patient Administration"] ; # 
  fhir:contact ( [
fhir:name [ fhir:v "HL7 International / Patient Administration" ] ;
    ( fhir:telecom [
fhir:system [ fhir:v "url" ] ;
fhir:value [ fhir:v "http://www.hl7.org/Special/committees/pafm" ]     ] [
fhir:system [ fhir:v "email" ] ;
fhir:value [ fhir:v "pafm@lists.hl7.org" ]     ] )
  ] ) ; # 
  fhir:description [ fhir:v "Endpoint Access Control Mechanism"] ; # 
  fhir:jurisdiction ( [
    ( fhir:coding [
fhir:system [ fhir:v "urn:iso:std:iso:3166"^^xsd:anyURI ] ;
fhir:code [ fhir:v "US" ] ;
fhir:display [ fhir:v "United States of America" ]     ] )
  ] ) ; # 
  fhir:caseSensitive [ fhir:v true] ; # 
  fhir:content [ fhir:v "complete"] ; # 
  fhir:count [ fhir:v "15"^^xsd:nonNegativeInteger] ; # 
  fhir:concept ( [
fhir:code [ fhir:v "public" ] ;
fhir:display [ fhir:v "Public" ] ;
fhir:definition [ fhir:v "Public access without any specific access control." ]
  ] [
fhir:code [ fhir:v "OAuth" ] ;
fhir:display [ fhir:v "OAuth" ] ;
fhir:definition [ fhir:v "OAuth (unspecified version see oauth.net)." ]
  ] [
fhir:code [ fhir:v "SMART-on-FHIR" ] ;
fhir:display [ fhir:v "SMART-on-FHIR" ] ;
fhir:definition [ fhir:v "OAuth2 using SMART-on-FHIR profile (see http://docs.smarthealthit.org/)." ]
  ] [
fhir:code [ fhir:v "NTLM" ] ;
fhir:display [ fhir:v "NTLM" ] ;
fhir:definition [ fhir:v "Microsoft NTLM Authentication." ]
  ] [
fhir:code [ fhir:v "basic" ] ;
fhir:display [ fhir:v "Basic" ] ;
fhir:definition [ fhir:v "Basic authentication defined in HTTP specification." ]
  ] [
fhir:code [ fhir:v "Kerberos" ] ;
fhir:display [ fhir:v "Kerberos" ] ;
fhir:definition [ fhir:v "see http://www.ietf.org/rfc/rfc4120.txt." ]
  ] [
fhir:code [ fhir:v "Certificates" ] ;
fhir:display [ fhir:v "Certificates" ] ;
fhir:definition [ fhir:v "SSL where client must have a certificate registered with the server." ]
  ] [
fhir:code [ fhir:v "opaque-access-token" ] ;
fhir:display [ fhir:v "Opaque Access Token" ] ;
fhir:definition [ fhir:v "Uses an opaque token for access control, which is a token whose structure is not visible or meaningful to the client." ]
  ] [
fhir:code [ fhir:v "jwt-access-token" ] ;
fhir:display [ fhir:v "JWT Access Token" ] ;
fhir:definition [ fhir:v "Uses a JSON Web Token (JWT) for access control, which is a compact, URL-safe means of representing claims to be transferred between two parties." ]
  ] [
fhir:code [ fhir:v "mutual-tls" ] ;
fhir:display [ fhir:v "Mutual TLS" ] ;
fhir:definition [ fhir:v "Uses mutual Transport Layer Security (TLS) where both client and server authenticate each other using certificates." ]
  ] [
fhir:code [ fhir:v "wss-saml-token" ] ;
fhir:display [ fhir:v "WSS SAML Token" ] ;
fhir:definition [ fhir:v "Uses a Security Assertion Markup Language (SAML) token within the Web Services Security (WSS) framework for access control." ]
  ] [
fhir:code [ fhir:v "wss-username-token" ] ;
fhir:display [ fhir:v "WSS User Name Token" ] ;
fhir:definition [ fhir:v "Uses a username token within the WSS framework for access control." ]
  ] [
fhir:code [ fhir:v "wss-kerberos-token" ] ;
fhir:display [ fhir:v "WSS Kerberos Token" ] ;
fhir:definition [ fhir:v "Uses a Kerberos token within the WSS framework for access control." ]
  ] [
fhir:code [ fhir:v "wss-x509-token" ] ;
fhir:display [ fhir:v "WSS X509 Token" ] ;
fhir:definition [ fhir:v "Uses an X.509 certificate token within the WSS framework for access control." ]
  ] [
fhir:code [ fhir:v "wss-custom-token" ] ;
fhir:display [ fhir:v "WSS Custom Token" ] ;
fhir:definition [ fhir:v "Uses a custom token within the WSS framework for access control." ]
  ] ) . #