SecurityAndPrivacy

The FHIM Security and Privacy domain models information related to access-control policies and their enforcement. While historically security and patient-defined consent have been viewed as separate subjects, in effect they are enforced the same way, especially in a distributed environment. For example, there is no functional difference between the enforcement of a corporate policy that declares that only mental health specialists can see mental health data and the enforcement of a patient’s directive to grant visibility of their mental-health related medications to their primary physician, but not to their dentist.
The FHIM Security and Privacy domain is closely based on the HL7 Security and Privacy Domain Analysis Model (DAM) of May 2010. There are however, several important differences between this FHIM model and the DAM: a) The DAM has SecurityRole as a subtype of CompositePolicy. We made it an association instead. Then, because both BasicPolicy and CompositePolicy have associations to SecurityRole, we moved the association to Policy, which is the common supertype of both BasicPolicy and CompositePolicy. b) The DAM models JurisdictionalOrganization and ProviderOrganization as subtypes of Authority. Indeed, ProviderOrganization is also a subtype of Grantee (multiple-inheritance). In the FHIM, ProviderOrganization and JurisidictionalOrganization are existing stand-alone concepts. So we changed the inheritance relationship to association relationships. c) The DAM models Patient and Population as subtypes of SubjectOfRecord. In the FHIM, Patient and Population are existing stand-alone concepts. So we changed the inheritance relationship to association relationships.
There are some outstanding issues as well. We need to better understand the PrivateInsurance and PublicServices classes. These appear to mimic E/E/COB classes, but the purpose for these is unclear. HL7 already has an exhaustive list of coverage types. Should OrganizationalProvider be an Entity rather than a Role?

_SecurityAndPrivacy
patient Property patient Property patient patient Property Property subjectOfRecord_patient Polyline coordinates describing hotspot on the image person Property person Property person person Property Property authority_person Polyline coordinates describing hotspot on the image healthcareProvider Property healthcareProvider Property healthcareProvider healthcareProvider Property Property privacyRule_healthcareProvider Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image clinicalCondition Property clinicalCondition Property clinicalCondition clinicalCondition Property Property informationResource_clinicalCondition Polyline coordinates describing hotspot on the image subjectOfConsent Property subjectOfConsent Property subjectOfConsent subjectOfConsent Property Property consentDirective_subjectOfConsent Polyline coordinates describing hotspot on the image client Property client Property client client Property Property consenter_client Polyline coordinates describing hotspot on the image securityLabelCategory Property securityLabelCategory Property securityLabelCategory securityLabelCategory Property Property securityLabel_securityLabelCategory Polyline coordinates describing hotspot on the image securityLabelHandling Property securityLabelHandling Property securityLabelHandling securityLabelHandling Property Property securityLabel_securityLabelHandling Polyline coordinates describing hotspot on the image securityLabelHeader Property securityLabelHeader Property securityLabelHeader securityLabelHeader Property Property securityLabel_securityLabelHeader Polyline coordinates describing hotspot on the image spif Property spif Property spif spif Property Property securityLabelHeader_spif Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image grantor Property grantor Property grantor grantor Property Property delegationPolicy_grantor Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image authenicationToken Property authenicationToken Property authenicationToken authenicationToken Property Property trustFramework_authenicationToken Polyline coordinates describing hotspot on the image policyConstraint Property policyConstraint Property policyConstraint policyConstraint Property Property trustContract_policyConstraint Polyline coordinates describing hotspot on the image authenicationToken Property authenicationToken Property authenicationToken authenicationToken Property Property trustContract_authenicationToken Polyline coordinates describing hotspot on the image publishedPolicy Property publishedPolicy Property publishedPolicy publishedPolicy Property Property consentDirective_publishedPolicy Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image securityLabel Property securityLabel Property securityLabel securityLabel Property Property informationResource_securityLabel Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image securityGroup Property securityGroup Property securityGroup securityGroup Property Property initiator_securityGroup Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image grantor Property grantor Property grantor grantor Property Property privacyRule_grantor Polyline coordinates describing hotspot on the image grantee Property grantee Property grantee grantee Property Property privacyRule_grantee Polyline coordinates describing hotspot on the image informationType Property informationType Property informationType informationType Property Property privacyRule_informationType Polyline coordinates describing hotspot on the image securityRole Property securityRole Property securityRole securityRole Property Property policy_securityRole Polyline coordinates describing hotspot on the image policy Property policy Property policy policy Property Property initiator_policy Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image policy Property policy Property policy policy Property Property compositePolicy_policy Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image policy Property policy Property policy policy Property Property securityRole_policy Polyline coordinates describing hotspot on the image replacesDirective Property replacesDirective Property replacesDirective replacesDirective Property Property consentDirective_replacesDirective Polyline coordinates describing hotspot on the image consenter Property consenter Property consenter consenter Property Property consentDirective_consenter Polyline coordinates describing hotspot on the image subjectOfRecord Property subjectOfRecord Property subjectOfRecord subjectOfRecord Property Property informationResource_subjectOfRecord Polyline coordinates describing hotspot on the image population Property population Property population population Property Property subjectOfRecord_population Polyline coordinates describing hotspot on the image coverageType Property coverageType Property coverageType coverageType Property Property informationResource_coverageType Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image grantee Property grantee Property grantee grantee Property Property consenter_grantee Polyline coordinates describing hotspot on the image authority Property authority Property authority authority Property Property grantee_authority Polyline coordinates describing hotspot on the image informationObject Property informationObject Property informationObject informationObject Property Property permission_informationObject Polyline coordinates describing hotspot on the image informationObject Property informationObject Property informationObject informationObject Property Property informationResource_informationObject Polyline coordinates describing hotspot on the image permission Property permission Property permission permission Property Property permissionCatalog_permission Polyline coordinates describing hotspot on the image grantee Property grantee Property grantee grantee Property Property delegationPolicy_grantee Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image userIdentity Property userIdentity Property userIdentity userIdentity Property Property initiator_userIdentity Polyline coordinates describing hotspot on the image trustFramework Property trustFramework Property trustFramework trustFramework Property Property initiator_trustFramework Polyline coordinates describing hotspot on the image trustContract Property trustContract Property trustContract trustContract Property Property trustFramework_trustContract Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image securityRole Property securityRole Property securityRole securityRole Property Property initiator_securityRole Polyline coordinates describing hotspot on the image securityLabel Property securityLabel Property securityLabel securityLabel Property Property clearance_securityLabel Polyline coordinates describing hotspot on the image securityContext Property securityContext Property securityContext securityContext Property Property initiator_securityContext Polyline coordinates describing hotspot on the image operation Property operation Property operation operation Property Property permission_operation Polyline coordinates describing hotspot on the image clearance Property clearance Property clearance clearance Property Property initiator_clearance Polyline coordinates describing hotspot on the image authenicationToken Property authenicationToken Property authenicationToken authenicationToken Property Property initiator_authenicationToken Polyline coordinates describing hotspot on the image child hierarchicalgroup child hierarchicalgroup child child hierarchicalgroup hierarchicalgroup hierarchicalGroup_hierarchicalGroup Polyline coordinates describing hotspot on the image parent Property parent Property parent parent Property Property clearance_hierarchicalGroup Polyline coordinates describing hotspot on the image Person HealthcareProvider status patientId mothersIdentifier endDate beginDate Patient Comment condition ClinicalCondition Comment sensitivityField provenance privacyPolicy integrity compartment SecurityLabelCategory refrainPolicy purposeOfUse privacyMarkLabel obligationLabel SecurityLabelHandling reason purposeOfUse PurposeOfUsePolicy flagTextToBeRendered PrivacyMarkPolicy identifier SecurityLabelHeader identifier effectiveDateRange SecurityPolicyInformationFile ResourcePolicy ContextualPolicy RelationshipPolicy RolePolicy GroupPolicy Execute Delete Update Read Create Use Collection Disclosure Access OperationType compositePolicy PolicyConstraint privacyRule PrivacyPolicy InitiatorBasedPolicy privacyPolicy securityRole purposeOfUse privacyPolicyLawType refrainCode enablesOperation effectiveTime accessRestrictionOverride PrivacyRule uri status name mimeType identifier effectiveTime description authority Policy witness uri status identifier effectivePeriod documentImage dateCreated dataEnterer category ConsentDirective sensitivity SubjectOfRecord identifier existenceDateRange description Population policyCategory PolicyProgramSource Grantor signatureRecorded relationship name digitalSignature Consenter domain authorityType Authority sensitivity identifier category InformationObject refrainPolicyType RefrainPolicy version status name PermissionCatalog obligationPolicyType ObligationPolicy Grantee deligationPolicyType accessRight DelegationPolicy ConstraintPolicy route levelOfAssurance enablesAuthorization authorizationPolicyType allowableAccessTime AuthorizationPolicy status serviceDeliveryLocation name identifier UserIdentity trustPolicyLabel trustMechanismLabel trustFrameworkLabel trustCertificateLabel trustAssuranceLabel trustAccreditationCode TrustFramework domainAuthority TrustContract roleName roleCode StructuralRole roleIdentifier permission objectIdentifier name description authorityIdentifierName SecurityRole classificationLabel SecurityLabel SecurityGroup status route effectiveTime description contextType contextId SecurityContext version identifier description Permission operation Operation profileType initiatorType initiatorName initiatorIntegrityStatus effectiveDate confidentialityType accessControlId Initiator resourcePolicy confidentialityIndicator category InformationResource HierarchicalGroup roleName roleCode FunctionalRole FunctionalGroup CompositePolicy ClearancePolicy roleId roleCode name clearancePolicy allowedSensitivity Clearance tokenTypeCode tokenId levelOfAssurance claimedClearance AuthenticationToken securityContext implementableRule ruleText AtomicPolicy

Classifiers

Diagrams

Properties:

Alias
Keywords
NameSecurityAndPrivacy
Name Expression
NamespaceFHIM
Nesting PackageFHIM
Owned Template Signature
OwnerFHIM
Owning Template Parameter
Qualified NameFHIM::SecurityAndPrivacy
Stereotype
Template Parameter
VisibilityPublic