Minutes of November 13, 2009 XSPA TC call

["Staggs, David (SAIC)" <David.Staggs@va.gov>]

XSPA Conference Call

Friday, November 13, 2009, 1:00pm ET

 

1. Roll Call

Voting Members:

John Moehrke, GE Healthcare

Steven Meyer, HIPAAT International, Inc.

Franck, Richard, IBM

David Weitzel, Mitre Corporation

Anil Saldhana, Red Hat

David Staggs, Veterans Health Administration

Mike Davis, Veterans Health Administration

 

Guests:

Jane Harnad, OASIS

Dee Schur

Quorum attained (7 of 8 voting members)

 

2. Minutes of October 2, 2009 were approved.

 

3. The XSPA profile of XACML and the XSPA profile of SAML have been approved as OASIS standards as of November 2. Congratulations to the XSPA TC members who participated in the creation, refinement and demonstration of the profiles.

 

4. OASIS press release:

Carol Geyer requests members examine the press release describing the XSPA profiles scheduled for public release soon.

 

5. Report out on the HITSP Security, Privacy, and Infrastructure adoption of the XSPA profile of SAML as a normative standard. In addition, the XSPA profile of XACML was included to the access control construct (TP20) and has been sent for public review.

 

6. XSPA profile of WS-Trust

Discussion began on the current draft of the XSPA profile of WS-Trust.  Richard suggested the TC review the need for a profile before continuing the work in the TC – he was unsure of its usefulness.  Mike suggested the need for WS-Trust in various scenarios (multi-point claims, PHR-driven exchanges) but agreed that a point paper would be useful.  Anil will send out documents that describe the use of WS-Trust in healthcare situations that were presented in the WS-Federation meeting.  David volunteered to produce a short paper summarizing the use of WS-Trust in healthcare scenarios.

 

7. Use of XSPA for non-US Realm

The TC needs to start a draft of the use of XSPA for international audiences and solicits ideas on how to move forward on this topic.  Mike suggested the ongoing work in HL7 and ISO on security information models should be investigated.

 

8. Additional discussion: Jane and Dee suggest demonstrating the XSPA profiles at RSA (or HIMSS).  Mike was very supportive and thought we have a good story to tell of the use of XSPA in TP20.  Jane can get a substantial discount if we have enough interest to move forward.  Could be more than just the XSPA work demonstrated at the booth.

 

Dee discussed the OASIS-ITU relationship and would like to invite the ITU representative to the XSPA call.

 

9. Action Items

0025 Dee to invite ITU-T liaison to XSPA TC Call (Dee Schur)

0023 Discuss WS-Trust profile agenda. (David Staggs to write brief)

??  Distribution of WS-Federation examples of WS-Trust in Healthcare (Anil Saldhana)

 

Next meeting December 4, 2009.

 

Meeting Adjourned

 

 

David Staggs, JD, CISSP (SAIC)
Veterans Health Administration
Chief Health Informatics Office
Standards and Interoperability
Office: 858 433 1473