Extensions for Using Data Elements from FHIR R4B in FHIR STU3
0.1.0 - STU International flag

Extensions for Using Data Elements from FHIR R4B in FHIR STU3 - Downloaded Version null See the Directory of published versions

: R4BResourceSecurityCategoryForR3 - XML Representation

Page standards status: Trial-use Maturity Level: 0

Raw xml | Download


<ValueSet xmlns="http://hl7.org/fhir">
  <id value="R4B-resource-security-category-for-R3"/>
  <text>
    <status value="generated"/>
    <div xmlns="http://www.w3.org/1999/xhtml"><p class="res-header-id"><b>Generated Narrative: ValueSet R4B-resource-security-category-for-R3</b></p><a name="R4B-resource-security-category-for-R3"> </a><a name="hcR4B-resource-security-category-for-R3"> </a><p>This value set expansion contains 5 concepts.</p><table class="codes"><tr><td><b>System</b></td><td><b>Version</b></td><td style="white-space:nowrap"><b>Code</b></td><td><b>Display</b></td><td><b>Definition</b></td></tr><tr><td><a name="R4B-resource-security-category-for-R3-http://hl7.org/fhir/resource-security-category-anonymous"> </a><code>http://hl7.org/fhir/resource-security-category</code></td><td>4.3.0</td><td style="white-space:nowrap">  <a href="CodeSystem-resource-security-category.html#resource-security-category-anonymous">anonymous</a></td><td>Anonymous READ Access Resource</td><td>These resources tend to not contain any individual data, or business sensitive data. Most often these Resources will be available for anonymous access, meaning there is no access control based on the user or system requesting. However these Resources do tend to contain important information that must be authenticated back to the source publishing them, and protected from integrity failures in communication. For this reason server authenticated https (TLS) is recommended to provide authentication of the server and integrity protection in transit. This is normal web-server use of https.</td></tr><tr><td><a name="R4B-resource-security-category-for-R3-http://hl7.org/fhir/resource-security-category-business"> </a><code>http://hl7.org/fhir/resource-security-category</code></td><td>4.3.0</td><td style="white-space:nowrap">  <a href="CodeSystem-resource-security-category.html#resource-security-category-business">business</a></td><td>Business Sensitive Resource</td><td>These Resources tend to not contain any individual data, but do have data that describe business or service sensitive data. The use of the term Business is not intended to only mean an incorporated business, but rather the more broad concept of an organization, location, or other group that is not identifable as individuals. Often these resources will require some for of client authentication to assure that only authorized access is given. The client access control may be to individuals, or may be to system identity. For this purpose possible client authentication methods such as: mutual-authenticated-TLS, APIKey, App signed JWT, or App OAuth client-id JWT For example: a App that uses a Business protected Provider Directory to determine other business endpoint details.</td></tr><tr><td><a name="R4B-resource-security-category-for-R3-http://hl7.org/fhir/resource-security-category-individual"> </a><code>http://hl7.org/fhir/resource-security-category</code></td><td>4.3.0</td><td style="white-space:nowrap">  <a href="CodeSystem-resource-security-category.html#resource-security-category-individual">individual</a></td><td>Individual Sensitive Resource</td><td>These Resources do NOT contain Patient data, but do contain individual information about other participants. These other individuals are Practitioners, PractitionerRole, CareTeam, or other users. These identities are needed to enable the practice of healthcare. These identities are identities under general privacy regulations, and thus must consider Privacy risk. Often access to these other identities are covered by business relationships. For this purpose access to these Resources will tend to be Role specific using methods such as RBAC or ABAC.</td></tr><tr><td><a name="R4B-resource-security-category-for-R3-http://hl7.org/fhir/resource-security-category-not-classified"> </a><code>http://hl7.org/fhir/resource-security-category</code></td><td>4.3.0</td><td style="white-space:nowrap">  <a href="CodeSystem-resource-security-category.html#resource-security-category-not-classified">not-classified</a></td><td>Not classified</td><td>Some Resources can be used for a wide scope of use-cases that span very sensitive to very non-sensitive. These Resources do not fall into any of the above classifications, as their sensitivity is highly variable. These Resources will need special handling. These Resources often contain metadata that describes the content in a way that can be used for Access Control decisions.</td></tr><tr><td><a name="R4B-resource-security-category-for-R3-http://hl7.org/fhir/resource-security-category-patient"> </a><code>http://hl7.org/fhir/resource-security-category</code></td><td>4.3.0</td><td style="white-space:nowrap">  <a href="CodeSystem-resource-security-category.html#resource-security-category-patient">patient</a></td><td>Patient Sensitive</td><td>These Resources make up the bulk of FHIR and therefore are the most commonly understood. These Resources contain highly sesitive health information, or are closely linked to highly sensitive health information. These Resources will often use the security labels to differentiate various confidentiality levels within this broad group of Patient Sensitive data. Access to these Resources often requires a declared Purpose Of Use. Access to these Resources is often controlled by a Privacy Consent.</td></tr></table></div>
  </text>
  <extension
             url="http://hl7.org/fhir/StructureDefinition/structuredefinition-wg">
    <valueCode value="fhir"/>
  </extension>
  <extension url="http://hl7.org/fhir/StructureDefinition/package-source">
    <extension url="packageId">
      <valueId value="hl7.fhir.uv.xver-r4b.r3"/>
    </extension>
    <extension url="version">
      <valueString value="0.1.0"/>
    </extension>
    <extension url="uri">
      <valueUri
                value="http://hl7.org/fhir/uv/xver/ImplementationGuide/hl7.fhir.uv.xver-r4b.r3"/>
    </extension>
  </extension>
  <extension
             url="http://hl7.org/fhir/StructureDefinition/structuredefinition-fmm">
    <valueInteger value="0">
      <extension
                 url="http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom">
        <valueUri
                  value="http://hl7.org/fhir/uv/xver/ImplementationGuide/hl7.fhir.uv.xver-r4b.r3"/>
      </extension>
    </valueInteger>
  </extension>
  <extension
             url="http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status">
    <valueCode value="trial-use">
      <extension
                 url="http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom">
        <valueUri
                  value="http://hl7.org/fhir/uv/xver/ImplementationGuide/hl7.fhir.uv.xver-r4b.r3"/>
      </extension>
    </valueCode>
  </extension>
  <url
       value="http://hl7.org/fhir/uv/xver/ValueSet/R4B-resource-security-category-for-R3"/>
  <version value="0.1.0"/>
  <name value="R4BResourceSecurityCategoryForR3"/>
  <title
         value="Cross-version ValueSet R4B.ResourceSecurityCategory for use in FHIR STU3"/>
  <status value="active"/>
  <experimental value="false"/>
  <date value="2026-03-17T21:02:03.8104715+00:00"/>
  <publisher value="FHIR Infrastructure"/>
  <contact>
    <name value="FHIR Infrastructure"/>
    <telecom>
      <system value="url"/>
      <value value="http://www.hl7.org/Special/committees/fiwg"/>
    </telecom>
  </contact>
  <description
               value="This cross-version ValueSet represents content from `http://hl7.org/fhir/ValueSet/resource-security-category|4.3.0` for use in FHIR STU3."/>
  <jurisdiction>
    <coding>
      <system value="http://unstats.un.org/unsd/methods/m49/m49.htm"/>
      <code value="001"/>
      <display value="World"/>
    </coding>
  </jurisdiction>
  <purpose
           value="This value set is part of the cross-version definitions generated to enable use of the
value set `http://hl7.org/fhir/ValueSet/resource-security-category|4.3.0` as defined in FHIR R4B
in FHIR STU3.

The source value set is bound to the following FHIR R4B elements:
* 

Across FHIR versions, the value set has been mapped as:
* `http://hl7.org/fhir/ValueSet/resource-security-category|4.3.0`
* `http://hl7.org/fhir/ValueSet/resource-security-category|4.0.1`

Note that all concepts are included in this cross-version definition because no concepts have compatible representations

Following are the generation technical comments:
All concepts in the comparison are listed as identical.
The source and target value sets have the same number of active concepts (5).
FHIR ValueSet `http://hl7.org/fhir/ValueSet/resource-security-category|4.3.0`, defined in FHIR R4B does not have any mapping to FHIR STU3"/>
  <compose>
    <include>
      <system value="http://hl7.org/fhir/resource-security-category"/>
      <version value="4.3.0"/>
      <concept>
        <code value="anonymous"/>
        <display value="Anonymous READ Access Resource"/>
      </concept>
      <concept>
        <code value="business"/>
        <display value="Business Sensitive Resource"/>
      </concept>
      <concept>
        <code value="individual"/>
        <display value="Individual Sensitive Resource"/>
      </concept>
      <concept>
        <code value="not-classified"/>
        <display value="Not classified"/>
      </concept>
      <concept>
        <code value="patient"/>
        <display value="Patient Sensitive"/>
      </concept>
    </include>
  </compose>
  <expansion>
    <timestamp value="2026-03-17T21:02:03.8104715+00:00"/>
    <contains>
      <system value="http://hl7.org/fhir/resource-security-category"/>
      <version value="4.3.0"/>
      <code value="anonymous"/>
      <display value="Anonymous READ Access Resource"/>
    </contains>
    <contains>
      <system value="http://hl7.org/fhir/resource-security-category"/>
      <version value="4.3.0"/>
      <code value="business"/>
      <display value="Business Sensitive Resource"/>
    </contains>
    <contains>
      <system value="http://hl7.org/fhir/resource-security-category"/>
      <version value="4.3.0"/>
      <code value="individual"/>
      <display value="Individual Sensitive Resource"/>
    </contains>
    <contains>
      <system value="http://hl7.org/fhir/resource-security-category"/>
      <version value="4.3.0"/>
      <code value="not-classified"/>
      <display value="Not classified"/>
    </contains>
    <contains>
      <system value="http://hl7.org/fhir/resource-security-category"/>
      <version value="4.3.0"/>
      <code value="patient"/>
      <display value="Patient Sensitive"/>
    </contains>
  </expansion>
</ValueSet>