SecurityAndPrivacy

The FHIM Security and Privacy domain models information related to access-control policies and their enforcement. While historically security and patient-defined consent have been viewed as separate subjects, in effect they are enforced the same way, especially in a distributed environment. For example, there is no functional difference between the enforcement of a corporate policy that declares that only mental health specialists can see mental health data and the enforcement of a patient’s directive to grant visibility of their mental-health related medications to their primary physician, but not to their dentist.
The FHIM Security and Privacy domain is closely based on the HL7 Security and Privacy Domain Analysis Model (DAM) of May 2010. There are however, several important differences between this FHIM model and the DAM: a) The DAM has SecurityRole as a subtype of CompositePolicy. We made it an association instead. Then, because both BasicPolicy and CompositePolicy have associations to SecurityRole, we moved the association to Policy, which is the common supertype of both BasicPolicy and CompositePolicy. b) The DAM models JurisdictionalOrganization and ProviderOrganization as subtypes of Authority. Indeed, ProviderOrganization is also a subtype of Grantee (multiple-inheritance). In the FHIM, ProviderOrganization and JurisidictionalOrganization are existing stand-alone concepts. So we changed the inheritance relationship to association relationships. c) The DAM models Patient and Population as subtypes of SubjectOfRecord. In the FHIM, Patient and Population are existing stand-alone concepts. So we changed the inheritance relationship to association relationships.
There are some outstanding issues as well. We need to better understand the PrivateInsurance and PublicServices classes. These appear to mimic E/E/COB classes, but the purpose for these is unclear. HL7 already has an exhaustive list of coverage types. Should OrganizationalProvider be an Entity rather than a Role?

_SecurityAndPrivacy
Generalization Polyline coordinates describing hotspot on the image subjectOfConsent Property subjectOfConsent Property subjectOfConsent subjectOfConsent Property Property consentDirective_subjectOfConsent Polyline coordinates describing hotspot on the image client Property client Property client client Property Property consenter_client Polyline coordinates describing hotspot on the image securityLabelCategory Property securityLabelCategory Property securityLabelCategory securityLabelCategory Property Property Association Polyline coordinates describing hotspot on the image securityLabelHandling Property securityLabelHandling Property securityLabelHandling securityLabelHandling Property Property Association Polyline coordinates describing hotspot on the image securityLabelHeader Property securityLabelHeader Property securityLabelHeader securityLabelHeader Property Property Association Polyline coordinates describing hotspot on the image spif Property spif Property spif spif Property Property Association Polyline coordinates describing hotspot on the image resourcePolicy Property resourcePolicy Property resourcePolicy resourcePolicy Property Property Association Polyline coordinates describing hotspot on the image contextualPolicy Property contextualPolicy Property contextualPolicy contextualPolicy Property Property Association Polyline coordinates describing hotspot on the image resourcePolicy Property resourcePolicy Property resourcePolicy resourcePolicy Property Property Association Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image grantor Property grantor Property grantor grantor Property Property Association Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image privacyOperation Property privacyOperation Property privacyOperation privacyOperation Property Property Association Polyline coordinates describing hotspot on the image authenicationToken Property authenicationToken Property authenicationToken authenicationToken Property Property Association Polyline coordinates describing hotspot on the image domainAuthority Property domainAuthority Property domainAuthority domainAuthority Property Property Association Polyline coordinates describing hotspot on the image compositePolicy Property compositePolicy Property compositePolicy compositePolicy Property Property Association Polyline coordinates describing hotspot on the image policyConstraint Property policyConstraint Property policyConstraint policyConstraint Property Property Association Polyline coordinates describing hotspot on the image authenicationToken Property authenicationToken Property authenicationToken authenicationToken Property Property Association Polyline coordinates describing hotspot on the image publishedPolicy Property publishedPolicy Property publishedPolicy publishedPolicy Property Property Association Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image privacyRule Property privacyRule Property privacyRule privacyRule Property Property Association Polyline coordinates describing hotspot on the image privacyPolicy Property privacyPolicy Property privacyPolicy privacyPolicy Property Property Association Polyline coordinates describing hotspot on the image securityLabel Property securityLabel Property securityLabel securityLabel Property Property Association Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image securityGroup Property securityGroup Property securityGroup securityGroup Property Property Association Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image grantor Property grantor Property grantor grantor Property Property Association Polyline coordinates describing hotspot on the image grantee Property grantee Property grantee grantee Property Property Association Polyline coordinates describing hotspot on the image securityRole Property securityRole Property securityRole securityRole Property Property Association Polyline coordinates describing hotspot on the image informationType Property informationType Property informationType informationType Property Property privacyRule_informationType Polyline coordinates describing hotspot on the image securityRole Property securityRole Property securityRole securityRole Property Property policy_securityRole Polyline coordinates describing hotspot on the image policy Property policy Property policy policy Property Property Association Polyline coordinates describing hotspot on the image authority Property authority Property authority authority Property Property policy_authority Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image policy Property policy Property policy policy Property Property Association Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image policy Property policy Property policy policy Property Property Association Polyline coordinates describing hotspot on the image replacesDirective Property replacesDirective Property replacesDirective replacesDirective Property Property consentDirective_replacesDirective Polyline coordinates describing hotspot on the image consenter Property consenter Property consenter consenter Property Property Association Polyline coordinates describing hotspot on the image subjectOfRecord Property subjectOfRecord Property subjectOfRecord subjectOfRecord Property Property informationReference_subjectOfRecord Polyline coordinates describing hotspot on the image population Property population Property population population Property Property subjectOfRecord_population Polyline coordinates describing hotspot on the image coverageType Property coverageType Property coverageType coverageType Property Property informationReference_coverageType Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image grantee Property grantee Property grantee grantee Property Property consenter_grantee Polyline coordinates describing hotspot on the image authority Property authority Property authority authority Property Property Association Polyline coordinates describing hotspot on the image informationObject Property informationObject Property informationObject informationObject Property Property permission_informationObject Polyline coordinates describing hotspot on the image informationObject Property informationObject Property informationObject informationObject Property Property informationReference_informationObject Polyline coordinates describing hotspot on the image permission Property permission Property permission permission Property Property permissionCatalog_permission Polyline coordinates describing hotspot on the image grantee Property grantee Property grantee grantee Property Property delegationPolicy_grantee Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image userIdentity Property userIdentity Property userIdentity userIdentity Property Property Association Polyline coordinates describing hotspot on the image trustFramework Property trustFramework Property trustFramework trustFramework Property Property Association Polyline coordinates describing hotspot on the image trustContract Property trustContract Property trustContract trustContract Property Property Association Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image permission Property permission Property permission permission Property Property Association Polyline coordinates describing hotspot on the image securityRole Property securityRole Property securityRole securityRole Property Property Association Polyline coordinates describing hotspot on the image securityLabel Property securityLabel Property securityLabel securityLabel Property Property Association Polyline coordinates describing hotspot on the image securityContext Property securityContext Property securityContext securityContext Property Property Association Polyline coordinates describing hotspot on the image securityContext Property securityContext Property securityContext securityContext Property Property Association Polyline coordinates describing hotspot on the image securityOperation Property securityOperation Property securityOperation securityOperation Property Property Association Polyline coordinates describing hotspot on the image clearance Property clearance Property clearance clearance Property Property Association Polyline coordinates describing hotspot on the image authenicationToken Property authenicationToken Property authenicationToken authenicationToken Property Property Association Polyline coordinates describing hotspot on the image hierarchicalGroup Property hierarchicalGroup Property hierarchicalGroup hierarchicalGroup Property Property Association Polyline coordinates describing hotspot on the image hierarchicalGroup Property hierarchicalGroup Property hierarchicalGroup hierarchicalGroup Property Property Association Polyline coordinates describing hotspot on the image clearancePolicy Property clearancePolicy Property clearancePolicy clearancePolicy Property Property Association Polyline coordinates describing hotspot on the image OtherGrantor status patientId mothersIdentifier endDate beginDate Patient Comment Comment condition _ClinicalCondition Comment Comment Comment Comment Comment provenance integrity compartment privacyPolicy sensitivityField SecurityLabelCategory purposeOfUse obligationLabel privacyMarkLabel refrainPolicy SecurityLabelHandling reason purposeOfUse PurposeOfUsePolicy flagTextToBeRendered PrivacyMarkPolicy id SecurityLabelHeader effectiveDateRange id SecurityPolicyInformationFile ResourcePolicy ContextualPolicy RelationshipPolicy RolePolicy GroupPolicy operation PrivacyOperation Use Collection Disclosure Access PrivacyOperationType PolicyConstraint PrivacyPolicy InitiatorBasedPolicy Execute Delete Update Read Create SecurityOperationType _SecurityAndPrivacyTerminology purposeOfUse privacyPolicyLawType refrainCode enablesOperation effectiveTime accessRestrictionOverride PrivacyRule uri status name mimeType id effectiveTime description Policy witness uri status id effectivePeriod documentImage dateCreated dataEnterer category ConsentDirective sensitivity SubjectOfRecord id existenceDateRange description Population policyCategory PolicyProgramSource Grantor name signatureRecorded digitalSignature relationship Consenter domain authorityType Authority sensitivity id category InformationObject refrainPolicyType RefrainPolicy version status name PermissionCatalog obligationPolicyType ObligationPolicy Grantee deligationPolicyType accessRight DelegationPolicy ConstraintPolicy route allowableAccessTime levelOfAssurance enablesAuthorization authorizationPolicyType AuthorizationPolicy status name id UserIdentity trustAssuranceLabel trustMechanismLabel trustAccreditationCode trustCertificateLabel trustPolicyLabel trustFrameworkLabel TrustFramework TrustContract roleCode roleName StructuralRole roleIdentifier objectIdentifier name description authorityIdentifierName SecurityRole classificationLabel SecurityLabel SecurityGroup status route effectiveTime description contextType contextId SecurityContext version id description Permission operation SecurityOperation profileType initiatorType initiatorName initiatorIntegrityStatus effectiveDate confidentialityType accessControlId Initiator confidentialityIndicator category InformationResource HierarchicalGroup roleCode roleName FunctionalRole FunctionalGroup CompositePolicy ClearancePolicy roleId roleCode name allowedSensitivity Clearance tokenId claimedClearance tokenTypeCode levelOfAssurance AuthenicationToken implementableRule ruleText AtomicPolicy

Classifiers

Diagrams

Properties:

Alias
Keywords
NameSecurityAndPrivacy
Name Expression
NamespaceFHIM
Nesting PackageFHIM
Owned Template Signature
OwnerFHIM
Owning Template Parameter
Qualified NameFHIM::SecurityAndPrivacy
Stereotype
Template Parameter
VisibilityPublic