<div dir="ltr"><div><div>Hi Dale,<br><br></div>After some 10 years of working on interoperability, it must be clear to everyone that the complexity is completely out of hand. Yesterday's release of the Sequoia Project <a href="http://sequoiaproject.org/wp-content/uploads/2015/11/The-Sequoia-Project-Framework-for-Patient-Identity-Management.pdf">http://sequoiaproject.org/wp-content/uploads/2015/11/The-Sequoia-Project-Framework-for-Patient-Identity-Management.pdf</a> is a fine example. It opens more questions than it answers. For every step we have made forward, we take two steps back. For every meeting we have in HEART, we discover another "pattern".<br><br>Because all the work is driven by institutions rather than patients or doctors, it's not surprising that a simple patient-centered pattern has not been tried. HEART has the opportunity to be the first real attempt at a privacy-engineered and patient-directed interoperability profile as the foundation that the institutional patterns can build on. Everything else has already been tried :-)<br><br></div><div>Adrian<br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Nov 11, 2015 at 7:24 PM, Dale Moberg <span dir="ltr"><<a href="mailto:dale.moberg@orionhealth.com" target="_blank">dale.moberg@orionhealth.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word;color:rgb(0,0,0);font-size:14px;font-family:Calibri,sans-serif">
<div>Hi </div>
<div><br>
</div>
<div>Thanks for this link Adrian — very interesting. I hope that the position developed becomes a consensus context for development. I still think that there is a need to reconcile organizational interests, patient interests, operational interests (workflows),
and government regulatory interests.. It is my hope that the HEART work can be meshed with an inter organizational framework so that API security can make use of several IETF OAuth2 patterns. Also, OpenIdConnect (OAuth2-protected) informational services
(registation and attribute authority services that perhaps generalize identity information services in various ways) seem very promising. And HEART use cases do seem to indicate that patient consent or delegation will be important in the full solution. It
is not clear to me, though, that one pattern best covers all. If there are several patterns needed, and if they mesh appropriately, I think the diversity is not a fault overall.</div>
<div><br>
</div>
<div>Dale Moberg</div>
<div><br>
</div>
<div><br>
</div>
<span>
<div style="font-family:Calibri;font-size:11pt;text-align:left;color:black;BORDER-BOTTOM:medium none;BORDER-LEFT:medium none;PADDING-BOTTOM:0in;PADDING-LEFT:0in;PADDING-RIGHT:0in;BORDER-TOP:#b5c4df 1pt solid;BORDER-RIGHT:medium none;PADDING-TOP:3pt">
<span style="font-weight:bold">From: </span>Adrian Gropper <<a href="mailto:agropper@healthurl.com" target="_blank">agropper@healthurl.com</a>><br>
<span style="font-weight:bold">Date: </span>Wednesday, November 11, 2015 at 6:02 AM<br>
<span style="font-weight:bold">To: </span>"<a href="mailto:openid-specs-heart@lists.openid.net" target="_blank">openid-specs-heart@lists.openid.net</a>" <<a href="mailto:openid-specs-heart@lists.openid.net" target="_blank">openid-specs-heart@lists.openid.net</a>>, "<a href="mailto:wg-uma@kantarainitiative.org" target="_blank">wg-uma@kantarainitiative.org</a>
WG" <<a href="mailto:WG-UMA@kantarainitiative.org" target="_blank">WG-UMA@kantarainitiative.org</a>><span class=""><br>
<span style="font-weight:bold">Subject: </span>[Openid-specs-heart] This will get more people talking about HEART<br>
</span></div><div><div class="h5">
<div><br>
</div>
<div>
<div><a href="http://geekdoctor.blogspot.com/2015/11/the-path-forward-for-meaningful-use.html" target="_blank">http://geekdoctor.blogspot.com/2015/11/the-path-forward-for-meaningful-use.html</a>
<div><br>
</div>
<div>Halamka is arguably the chief spokesperson for the health IT industry.</div>
<div><br>
</div>
<div>Adrian</div>
<br>
<br>
-- <br>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div><br>
<div dir="ltr">Adrian Gropper MD<span style="font-size:11pt"></span><br>
<br>
<span style="font-family:Arial,sans-serif;color:rgb(31,73,125)">PROTECT YOUR FUTURE - RESTORE Health Privacy!</span><span style="font-family:Arial,sans-serif;color:rgb(31,73,125)"><br>
HELP us fight for the right to control personal health data.</span><span style="font-family:Arial,sans-serif;color:rgb(31,73,125)"></span><span style="font-family:Arial,sans-serif;color:rgb(31,73,125)"><br>
DONATE: <a href="http://patientprivacyrights.org/donate-2/" target="_blank"><span style="color:#0563c1">http://patientprivacyrights.org/donate-2/</span></a></span><span style="color:#1f497d"></span></div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
</div>
</div>
</div></div></span>
</div>
</blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><br><div dir="ltr">Adrian Gropper MD<span style="font-size:11pt"></span><br><br><span style="font-family:"Arial",sans-serif;color:#1f497d">PROTECT YOUR FUTURE - RESTORE Health Privacy!</span><span style="font-family:"Arial",sans-serif;color:#1f497d"><br>HELP us fight for the right to control personal health data.</span><span style="font-family:"Arial",sans-serif;color:#1f497d"></span><span style="font-family:"Arial",sans-serif;color:#1f497d"><br>DONATE:
<a href="http://patientprivacyrights.org/donate-2/" target="_blank"><span style="color:#0563c1">http://patientprivacyrights.org/donate-2/</span></a></span><span style="color:#1f497d"></span>
</div></div></div></div></div></div></div></div>
</div>