<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none"><!-- p { margin-top: 0px; margin-bottom: 0px; }--></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Garamond;">
<p>Justin and all,</p>
<p> </p>
<p>Here are the several HL7 FHIR and related references to the "Break the Glass" and "Emergency Access" definitions and examples, originally from the Mike Davis (Veterans Administration) excerpted paper of 1999 that I cited during the call today.
</p>
<p> </p>
<p>I attached Mike's entire paper also (HC Requirements...) which is cited in the HL7 guide (the pdf document from January 2014).</p>
<p> </p>
<p>Tom</p>
<p></p>
<div id="Signature">
<div style="margin: 0px; font-family: Calibri,Arial,Helvetica,sans-serif;" name="divtagdefaultwrapper">
<div><font face="Tahoma" size="2">Thomas E Sullivan, MD</font></div>
<div><font face="tahoma" size="2">Chief Strategic Officer</font></div>
<div><font face="tahoma" size="2"><font face="tahoma">Chief Privacy Officer</font></font></div>
<div><font face="tahoma" size="2"><font face="tahoma"><span style="color: rgb(31, 73, 125);"><img width="168" height="60" id="_x0000_i1027" style="width: 157px; height: 60px;" alt="Description: Description: DrFirst_OneLiner_OneLiner_Main" src="https://webmail.drfirst.com/owa/attachment.ashx?id=RgAAAAA6yQLApWexRZaJxpyy8HHZBwDQP%2fwgRmbtQrVGg2DH3Lx0AAxWz418AAB0XpmdwXgQRIzmHBSsMx1HAAHKGn%2f%2fAAAJ&attcnt=1&attid0=EACpbTsm97L2ToLJCuPosEZC"></span></font></font></div>
<div><font face="tahoma" size="2"> DrFirst.com, Inc.</font></div>
<div><font face="tahoma" size="2">(978) 729-5075 (M)</font></div>
<div><font face="tahoma" size="2"><a tabindex="0" id="NoLP" href="mailto:tsullivan@drfirst.com">tsullivan@drfirst.com</a></font></div>
<div><font face="tahoma" size="2"><a tabindex="0" id="NoLP" href="mailto:sullivan@massmed.org">sullivan@massmed.org</a></font></div>
<div> </div>
</div>
</div>
<div style="color: rgb(33, 33, 33);">
<hr tabindex="-1" style="width: 98%; display: inline-block;">
<div id="divRplyFwdMsg" dir="ltr"><font color="#000000" face="Calibri, sans-serif" style="font-size: 11pt;"><b>From:</b> Openid-specs-heart <openid-specs-heart-bounces@lists.openid.net> on behalf of Sarah Squire <sarah@engageidentity.com><br>
<b>Sent:</b> Tuesday, April 25, 2017 5:08 PM<br>
<b>To:</b> HEART List<br>
<b>Subject:</b> [Openid-specs-heart] Draft HEART Meeting Notes 2017-04-25</font>
<div> </div>
</div>
<div>
<div dir="ltr"><span id="gmail-docs-internal-guid-82321acc-a6f0-a2ba-ba73-bcc0d6ec7f96">
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Attending:</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Debbie Bucci</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Celestin Bitjonck</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Edmund Jay</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Eve Maler</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Justin Richer</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Luis Maas</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Nancy Lush</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Sarah Squire</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Thomas Sullivan</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Justin:</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">There are two changes to the
OAuth FHIR profile. The description of the document has changed to clarify that this applies to any FHIR resource. That was always the intent. There’s also new guidance about the patient compartment. We also have new examples of scopes.</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Luis:</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">We might also want to reference
the URL of the FHIR specification, but people could find it from the patient compartment website. We might want to say that the normative definitions of these are governed by FHIR, not by us.</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Justin:</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Agreed. That should be easy
to do.</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">We have changed a MAY to a SHOULD
with regard to ETH scopes. I think that still gives enough wiggle room for people to disregard it in special circumstances.</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">We changed section 2.1 to talk
about resources or compartments, since talking about a compartment might be more valuable.</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">We changed compartments and
scope definitions in the UMA FHIR spec.</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Eve:</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Can you say more about compartments?</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Debbie:</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">It’s a resource type that’s
commonly referenced in FHIR implementations.</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Eve:</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Great. That makes sense to me.</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Justin:</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">If people can propose example
text on the list, that would be very helpful.</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">We also took out purpose of
use. We might see it come back in in a different place, but I don’t think that we were using it well.</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Nancy:</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">I think the VA might have been
using it. I’ll ask them.</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Luis:</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Fundamentally, it’s an assertion
by the user, similar to break the glass</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Justin:</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Right, break the glass is a
scope.</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Luis:</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Does the break the glass section
belong in the OAuth spec or the UMA spec?</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Justin:</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">It’s in both. It’s defined in
OAuth and referenced in UMA.</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Thomas:</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">I just sent the break the glass
text used by the VA.</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Debbie:</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Is emergency access different
from break the glass?</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Luis:</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">So typically hipaa describes
emergency access as like when the system is down, whereas break the glass is getting access to something you wouldn’t normally have.</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Debbie:</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">So really we’re talking about
break the glass.</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Luis:</span></p>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Right.</span></p>
<br>
<p style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" dir="ltr"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">Debbie:</span></p>
<span style="color: rgb(0, 0, 0); font-family: arial; font-size: 11pt; vertical-align: baseline; white-space: pre-wrap; background-color: transparent;">So there’s no meeting next Monday. We have an open review period and then a vote, and then they’re published
as implementer’s drafts. It was suggested by the OpenID Foundation that once the drafts are final, we should still keep the group active so implementers can ask questions.</span></span>
<div><font color="#000000" face="arial"><span style="font-size: 14.66px; white-space: pre-wrap;"><br clear="all">
</span></font>
<div>
<div class="gmail_signature">
<div dir="ltr">
<div style="color: rgb(136, 136, 136);">Sarah Squire</div>
<div style="color: rgb(136, 136, 136);">Engage Identity</div>
<div style="color: rgb(136, 136, 136);"><a style="color: rgb(17, 85, 204);" href="http://engageidentity.com/" target="_blank">http://engageidentity.com</a></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
Notice of Confidentiality: The information included and/or attached in this electronic mail transmission may contain confidential or privileged information and is intended for the addressee. Any unauthorized disclosure, reproduction, distribution or the taking
of action in reliance on the contents of the information is prohibited. If you believe that you have received the message in error, please notify the sender by reply transmission and delete the message without copying or disclosing it.
</body>
</html>