Minutes of June 25, 2010 XSPA Conference Call

Minutes of XSPA Conference Call

Friday, June 25, 2010, 1:00pm ET

Dial in info: +1 800 767 1750

Access code 97728 [i.e. XSPA T(C)]

1. Roll Call & Agenda Review

Voting Members:

John Moehrke, GE Healthcare

Anil Saldhana, Red Hat

David Staggs, Veterans Health Administration

Members:

Michael Dufel, Jericho Systems Corporation

Guests:

Ed Coyne, Veterans Health Administration

Quorum reached (3/5)

2. Minutes of May 28, 2010 were approved.

3. General announcements were made concerning the Identity Management 2010 Conference (27-28 September 2010) and “Structure” cloud computing conference.

4. Comments made on the Profile of WS-Trust during the 90 day public comment period were reviewed. Official end of public comment: 26 June 2010. Duane will respond to Dr. Chadwick’s comment on the figure.

5. David provided a presentation was made to the HIT-SC (Health Information Technology-Standards Committee), a FACA (Federal Advisory Committee Act) committee on advanced security and privacy which included reference to the XSPA standards and the reference implementation used at the RSA 2010 demonstration.

6. Duane DeCouteau will be demonstrating the reference implementation of the OASIS XSPA standards at the U.S. HIT Policy Committee (HITPC) Privacy and Security Tiger Team’s hearing on consumer choice technology June 29, 2010 at 2:15 PM.

7. The TC reviewed the Ontology Decision Point (ODP) XACML TC use cases posted to the list. TC gave provisional OK to share with XACML TC but there was some concern this might be too early. John pointed out role ontology does not always match rights inheritance and that different domains might have differing results. For example Western medical doctor v. Chinese medical doctor might require differing rights and hierarchy therefore a bad model for rights assignment.

Some of the use cases from the list were considered better handled by attributes. Mike Dufel suggested the “care team” example could be better represented without an ontology.

9. General discussion

10. No active action items.

Regards,

David

David Staggs, JD, CISSP (SAIC)
Veterans Health Administration
Chief Health Informatics Office
Standards and Interoperability
Office: 858 433 1473

xspa message