<div dir="ltr"><div>Here's the link to the BLT presentation: <a href="https://dl.dropboxusercontent.com/u/8909568/GIS%20-%20Privacy%20Engineering%20Health%20IT.pdf" target="_blank">https://dl.dropboxusercontent.com/u/8909568/GIS%20-%20Privacy%20Engineering%20Health%20IT.pdf</a><br><br></div>Please add it to the minutes if anyone can and I'm happy to discuss further.<br><div><br>Adrian <br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Oct 19, 2015 at 6:13 PM, Meyer, Gunther <span dir="ltr"><<a href="mailto:Gunther.Meyer@allscripts.com" target="_blank">Gunther.Meyer@allscripts.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="blue" vlink="purple" lang="EN-US">
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Hi All!<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">First off, thank you for letting me participate in this discussion. And please excuse the Newbie questions or suggestions!<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">From a sharing of information point of view, if I put myself in the shoes of a patient, I see that sharing information with an individual makes sense, with the
following provisions<u></u><u></u></span></p>
<p><u></u><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><span>1.<span style="font:7.0pt "Times New Roman"">
</span></span></span><u></u><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">If the provider is not available, someone else that is their proxy must be able to access it.<u></u><u></u></span></p>
<p><u></u><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><span>2.<span style="font:7.0pt "Times New Roman"">
</span></span></span><u></u><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">I may not know the provider, for example if this is the first time at the practice (might be an edge case?)<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">As to the “group” concept, I did not want to get into the middle of a debate. I just wanted to point out that larger practices or hospital often consider sharing
in terms of groups of users rather than individuals, and would therefore be more comfortable with a sharing model that involved groups. Therefore it is just something we need to consider (though we might reject is as impractical)<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Could someone please share the link to the BLT presentation, that sounded very interesting.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Also, I think that the point that the application, C, might have to be better defined seems to have merit, unless the patient just authorizes the Hospital?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Finally, I think that the patient sharing with an individual doctor is interesting if the user’s intent can be preserved during the import process. I think very
few users, however, will express much more than the default “share with anyone as needed for treatment” consent. Therefore, once the information is shared with NYP, as discussed, it will be imported and then the organizational security and policies will kick
in.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Regards<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Gunther<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal" style="line-height:12.0pt"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#5b8f22">Gunther Meyer</span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#707176"> |
</span><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#616365">Architect<br>
</span></b><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#5b8f22">Allscripts</span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#707176"> | 8529 Six Forks Road | Raleigh, NC |27615<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#616365"> <br>
<a href="tel:919.329.1466" value="+19193291466" target="_blank">919.329.1466</a></span><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">|
</span><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:green">P<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#616365"><a href="tel:919.457.4466" value="+19194574466" target="_blank">919.457.4466</a></span><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">|
</span><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:green">F<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#616365"><br>
</span><u><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#5b8f22"><a href="mailto:gunther.meyer@allscripts.com" target="_blank">gunther.meyer@allscripts.com</a></span></u><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black"> |
</span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><a href="http://www.allscripts.com/" target="_blank"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#5b8f22">www.allscripts.com</span></a></span><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:green">
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#4d4f53">Corporate Headquarters l 222 Merchandise Mart Plaza l 20<sup>th</sup> Floor l Chicago, IL l 60654</span><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:green"><u></u><u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#76923c"><u></u> <u></u></span></b></p>
<p class="MsoNormal" style="margin-bottom:5.25pt;line-height:15.0pt"><u><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#76923c"><u></u><span style="text-decoration:none"> </span><u></u></span></u></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Openid-specs-heart [mailto:<a href="mailto:openid-specs-heart-bounces@lists.openid.net" target="_blank">openid-specs-heart-bounces@lists.openid.net</a>]
<b>On Behalf Of </b>Eve Maler<br>
<b>Sent:</b> Monday, October 19, 2015 4:00 PM<br>
<b>To:</b> <a href="mailto:openid-specs-heart@lists.openid.net" target="_blank">openid-specs-heart@lists.openid.net</a><br>
<b>Subject:</b> [Openid-specs-heart] "Individual-to-NPE" sharing episodes in UMA use cases, and "design pattern" solution options<u></u><u></u></span></p><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">I promised to write this up, and hopefully I'll make it before the deadline of today's call.<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">The subject line introduces what I hope will be useful consistent wording for discussing these sorts of topics. Some of our UMA use cases include episodes of party-to-party resource sharing that involve a resource owner who is an individual
(say, a patient or consumer), and a requesting party that <b>is, or is the agent of,</b> a "non-person entity" or NPE, such as a hospital, government agency, or company.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Staying entirely within the confines of the UMA protocol, a number of different "design patterns" could be chosen for deployment. Agreeing on which reasons to use which patterns, and locking down any areas of variability, could help make
systems interoperate with each other. The UMA protocol, in fact, expects such variability and recommends profiling to improve interoperability. Thus, it seems a good idea for us to figure out how much such types of interop are in scope for us, and likely <b>do
some profiling in these areas</b>.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Here are four patterns I can think of:<u></u><u></u></p>
</div>
<div>
<ol start="1" type="1">
<li class="MsoNormal">
<b>Individual-to-agent-of-NPE</b>: Alice the individual RO shares with "the individual RqP who can prove they control the identifier 'Dr. Bob'" (possible also constraining the client in use as well -- we'll leave that part out for this analysis).<u></u><u></u></li><li class="MsoNormal">
<b>Individual-to-NPE</b>: Alice the individual RO shares with "the NPE RqP that can prove they control the identifier 'New York Presbyterian Hospital'". Some process yet to be determined, possibly involving "chained delegation", ensures that Dr. Bob and possibly
others who work for NYP get access thereafter.<u></u><u></u></li><li class="MsoNormal">
<b>Individual-to-role</b>: Alice the individual RO shares with "any RqP who can prove they have been assigned the role 'works for NYP'".<u></u><u></u></li><li class="MsoNormal">
<b>Individual-to-individual</b>: Alice the individual RO shares with "the individual RqP who can prove they control the identifier 'bob@gmail'" (whom she knows is her doctor because he provisioned her with that gmail handle). Bob might do "chained delegation"
to share the resource with himself as an employee of NYP.<u></u><u></u></li></ol>
</div>
<div>
<p class="MsoNormal">The reason interop questions arise is because the process of UMA trust elevation involves things like claims-gathering and possibly step-up authentication, and the policy-setting options presented to Alice (which are out of band of UMA,
but nonetheless...) need to be driven by these requirements. The ability of the requesting sides to respond appropriately will be triggered off of expectations about what they'll be asked to cough up for trust elevation.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Each pattern has pros and cons. Briefly:<u></u><u></u></p>
</div>
<div>
<ul type="disc">
<li class="MsoNormal">
The one I'm least enamored of is #3; enterprise access control has had so much trouble with RBAC, so can we expect adding UMA to help? :-)<u></u><u></u></li><li class="MsoNormal">
Chained delegation can be very powerful. In environments where everybody uses the same UMA authorization server, a number of nice value-add features can be supported, but they tend to break down (at least with UMA V1.0.x) when you add the ability for every
RO to choose their own AS.<u></u><u></u></li><li class="MsoNormal">
I worry about sharing with individual doctors. It's very expedient, so people will tend to do it as a path of least resistance (think Google Apps!). And sometimes maybe it's the right answer, particularly if "chained delegation" can allow Alice to track where
her resource has been shared further. But what if Dr. Bob leaves the hospital/practice/whatever? Is this always the right answer?<u></u><u></u></li><li class="MsoNormal">
Sharing with an NPE sounds elegant -- it's what a recent POC of my acquaintance did. But the "process yet to be determined" mentioned above wasn't actually determined yet, so there's that. :-) And you have the problem of a system administrator who has privileged
identity credentials to the NPE account -- as always -- having the key to a pretty valuable kingdom. Maybe a cool mitigation of this risk is to go with sharing with individuals and tracking sharing chains?<u></u><u></u></li></ul>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<p><b>Eve Maler<br>
</b>ForgeRock Office of the CTO | VP Innovation & Emerging Technology<br>
Cell <a href="tel:%2B1%20425.345.6756" value="+14253456756" target="_blank">+1 425.345.6756</a> | Skype: xmlgrrl | Twitter: @xmlgrrl<br>
Join our <a href="http://forgerock.org/openuma/" target="_blank">ForgeRock.org OpenUMA</a> community!<u></u><u></u></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div></div></div>
</div>
<br>_______________________________________________<br>
Openid-specs-heart mailing list<br>
<a href="mailto:Openid-specs-heart@lists.openid.net">Openid-specs-heart@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-heart" rel="noreferrer" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-heart</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><br><div dir="ltr">Adrian Gropper MD<span style="font-size:11pt"></span><br><br><span style="font-family:"Arial",sans-serif;color:#1f497d">PROTECT YOUR FUTURE - RESTORE Health Privacy!</span><span style="font-family:"Arial",sans-serif;color:#1f497d"><br>HELP us fight for the right to control personal health data.</span><span style="font-family:"Arial",sans-serif;color:#1f497d"></span><span style="font-family:"Arial",sans-serif;color:#1f497d"><br>DONATE:
<a href="http://patientprivacyrights.org/donate-2/" target="_blank"><span style="color:#0563c1">http://patientprivacyrights.org/donate-2/</span></a></span><span style="color:#1f497d"></span>
</div></div></div></div></div></div></div></div>
</div>