Re: [security-services] Draft Minutes for SSTC Call (26 June 2012)

[Rainer Hörbe <rainer@hoerbe.at>]

Colin,

The epSOS project might be of limited relevance: first it is based on the IHE-stack (ebXML+SOAP+HL7), which defines backend exchanges - no WebSSO. Second, end users of the system are currently Health Care Providers. End users give consent on paper. A lot of XML paraphernalia is deployed to signal 'consent given'. I guess that would also fall into the category 'over engineered'.

- Rainer
Von meinem iPad gesendet

Am 27.06.2012 um 02:22 schrieb Colin Wallis <Colin.Wallis@dia.govt.nz>:

> Regarding Item 6 Dave and Duane...
> 
> We in NZ gov will be very interested in how the pilot goes wrt consent.
> We have been trying to work that here, without much success..or at least successfully in a clean and simple way.
> What we have has been variously described :-), but the nicest of those is 'over - engineered' (thanks Leif.. :-)
> 
> Cheers
> Colin
> 
> <snip>
> 
>> 6. Other items:
> 
> XSPA (Cross enterprise Security and Privacy Authorizations for Healthcare):
> David: European organization (epSOS) is using the XSPA profile for exchange
> of patient data.  The (US) Office of National Coordinator is hosting a pilot
> for developing standard ways to enforce patient consent directives.
> Suggested changes to the SSTC XSPA profile will be brought forward as
> developed by the XSPA TC and the experiences from the ONC pilot.
> 
> Duane: The Veterans Affairs and SAMSHA is working on data segmentation for
> the pilot and will add suggested changes for SSTC discussion.
> 
> Goal is to get the XSPA profile/changes to the committee by the next
> meeting.
>> 
> 
> ====
> CAUTION:  This email message and any attachments contain information that may be confidential and may be LEGALLY PRIVILEGED. If you are not the intended recipient, any use, disclosure or copying of this message or attachments is strictly prohibited. If you have received this email message in error please notify us immediately and erase all copies of the message and attachments. Thank you.
> ====
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: security-services-unsubscribe@lists.oasis-open.org
> For additional commands, e-mail: security-services-help@lists.oasis-open.org
>