Minutes of the September 4, 2009 XSPA Conference Call

1. Roll Call & Agenda Review

Voting Members:

John Moehrke, GE Healthcare

Steven Meyer, HIPAAT International, Inc.

Richard Franck, IBM

Mike Davis, Veterans Health Administration

Duane DeCouteau, Veterans Health Administration

David Staggs, Veterans Health Administration

Quorum attained.

2. Minutes of August 7, 2009 approved unanimously.

3. Status of the XSPA profiles

XSPA profile of XACML is being submitted for consideration as an OASIS Standard.

XSPA profile of SAML is being submitted for consideration as an OASIS Standard.

XSPA profile of WS-Trust still in draft form, need a champion.

4. XSPA Schemata

Duane has circulated drafts of schema for both XACML and SAML profiles.

5. ETSI Security Workshop was discussed.

http://www.oasis-open.org/apps/org/workgroup/xspa/email/archives/200908/msg00004.html

6. David reported on discussions with John Tolbert.

David discussed the work John Tolbert is doing on using XACML to make export control (US) authorization decisions based on jurisdictional rules. The parsing of the policies might be analogous to the parsing of jurisdictional privacy rules at the origin and terminus of the exchange. John is interested in discussing the work further with the XSPA TC.

7. Proposal to continue monthly schedule approved.

8. Further discussion.

9. Action Items

David has completed the action item to contact John Tolbert.

Regards,

David

David Staggs, JD, CISSP (SAIC)
Veterans Health Administration
Chief Health Informatics Office
Emerging Health Technologies
Office: 858 433 1473

xspa message