Project Summary for Privacy, Access and Security Services (PASS) Alpha Project
Visit Project Insight to see the full project details. *
Project Details
Number | 200 View Ballot Items List (with NIBs) |
---|---|
Name | Privacy, Access and Security Services (PASS) Alpha Project |
Sponsor(s) | Services Oriented Architecture Work Group |
Co-Sponsor(s) | Architectural Review Work Group, Community-Based Care and Privacy (CBCP) Work Group, Security Work Group |
Steering Division | Infrastructure |
Description | The Privacy, Access and Security Services (PASS) project specifications define a set of encapsulated, loosely-coupled and composable service components that can contribute to ensuring the confidentiality and integrity of healthcare information. These specifications are intended to align with the SAEAF and may include domain analysis/information models, service functional models, collaboration analysis models, platform independent models and platform specific models. |
Project Facilitator | Don Jorgenson |
Status | Archived |
SD Approval Date | Jul 7, 2015 |
TSC Approval Date | Jul 27, 2015 |
Type | Ballot - STU |
Objectives / Deliverables | Key objectives targeted by this project in being designated and operating as a SAEAF / EA Alpha initiative: - Specify an interoperable health information network (i.e. private and secure for patient health information) that is effectively transparent and payload agnostic under HL7 message, document and service paradigms. - Specify a SAEAF-compliant Specification Stack that defines a PASS architecture framework and encompasses domain analysis models, domain information models, essential service components and supporting vocabularies for authentication, authorization and audit services required by a health information network. - Support other HL7 working groups by specifying security/privacy functional capabilities that are exposed through well-defined service interfaces. - Provide platform independent and platform specific models to support the near-term needs of HITSP, NHIN-Connect, Infoway and other stakeholders. Project Scope The PASS Alpha project will undertake multiple projects related to a wide range of healthcare security and privacy scenarios. Phase 1 PASS-Alpha services are intended to provide the basic capabilities that allow a patient or provider to request access to patient health information from a protected resource and, based upon the security and privacy policies applied by the resource, have that access either be granted or denied. This phase will focus on the following: - Create an overall PASS Architecture Framework - Create conceptual, platform independent and platform specific level standards for: 1. Access Control 2. Federated Identity 3. Audit 4. Consumer Preferences - Identify or develop vocabularies in support of the PASS-Alpha subproject specifications. - Basic functionality in some real world scenarios based on core use case scenarios. The following areas and subproject areas will be out of scope for this phase: - PASS services not in direct support of interoperability - PASS services for which development resources are not available. Milestone /Targeted Date - Key Activities and/or Deliverables ArB Out of Cycle Meeting /Aug 18-20 - Dependency Diagram - PASS Architecture Framework Domain Analysis Model- UML model draft r 0.2 - PASS AF Domain Information Model- UML model draft r 0.2 - PASS-Alpha Roadmap draft r 0.1 HITSP face to face / Aug 25-27 - Status Report to HITSP SPI Committee - PASS-HITSP-NHIN Harmonization Report draft - PASS-Alpha Roadmap draft r 0.2 HL7 Working Group Meeting / Sept 20-25 For AF, ACS, Audit, and Identity: - Domain Business Context draft r 0.5 - Domain Analysis Model draft r 0.5 - Domain Information Model draft r 0.3 - Conformance Statements draft r 0.3 - Collaboration Analysis draft r 0.2 - PASS-Alpha Roadmap draft r 0.4 NHIN Spec Factory / Sept 30 - PASS-HITSP-NHIN Harmonization Report - PASS-Alpha Roadmap draft r 0.6 HL7 Intent to Ballot / Oct 31 - Notification of Intent to Ballot- WG approval HITSP FtF / Nov 3-5 - Status Report to SPI committee - PASS-HITSP-NHIN Harmonization Report - PASS-Alpha Roadmap draft r 0.7 HL7 Ballot Deadline / Nov 17-20 - All artifacts Content/Reconciliation Deadline- WG approval - Blueprint, Platform Independent and Platform Specific for AF, ACS, Audit, Identity and Consent NHIN Spec Factory Deadline 2 / HITSP Deadline / Dec 31 - NHIN Priority Spec drafts - HITSP Priority Spec drafts - PASS-HITSP-NHIN Harmonization Report - PASS-Alpha Roadmap draft r 0.8 HL7 Working Group Meeting / Jan 17-22, 2010 - PASS ballot reconciliations - PASS-Alpha Roadmap draft r 1.0 |
Next Milestone Date | 2016 January WGM |
Project End Date | 2016 January WGM |
Project Intent | Create New Standard |
Project Need | |
Implementers | Supports HITSP, NHIN, Infoway and other stakeholder programs |
Security Risks | |
External Drivers | |
Common Names / Keywords/ Aliases | |
Lineage | |
Dependancies | 1.5. Project Constraints - Deadlines of driving or dependent initiatives (e.g. HITSP, NHIN, Infoway) - Funding received for subprojects is not currently sufficient to complete all work - Resources may not be sufficient to meet Phase 1 objectives - HL7 Ballot dates - Varying expectations of stakeholders. See full set of Risks and issues in PASS Alpha Project Charter |
Project Document Repository | http://hssp-security.wikispaces.com/ |
Backwards Compatibility | |
External Vocabularies | |
Products | V3 Messages-Administrative |
Joint Copyright? | |
External Pjt Collaborators | HL7 ArB, Security, CBCC, SOA |
Realm | - Choose One - |
HL7 Affiliate | |
Stakeholders | |
Vendors | |
Providers | |
Ballot Cycle Info | 2015 Oct Ballot Cycle Info: NORMATIVE Ballot results: Did not meet basic vote requirements Document Name: HL7 Version 3 Standard: Privacy, Access and Security Services (PASS) - Access Control, Release 1 Alternate name requested: HL7 Version 3 Standard: Privacy, Access and Security Services (PASS) - Access Control Services Conceptual Model, Release 1 2010 Sept Ballot Cycle Info: DSTU Ballot results: Met basic vote requirements. 17 Negative votes to reconcile Document Name: HL7 Version 3 Standard: Privacy, Access and Security Services (PASS) - Audit Services, Release 1 Last Ballot Code: V3_PASS_AUDIT_CL_R1_TBD NIB Submitted By: Don Jorgenson 2010 May Ballot Cycle Info: DSTU Ballot results: Postponed Document Name: HL7 Version 3 Standard: Privacy, Access and Security Services (PASS) - Audit, Conceptual Level, Release 1 Ballot Code: V3_PASS_AUDIT_CL_R1_TBD NIB Submitted By: Don Jorgenson 2010 May Ballot Cycle Info: DSTU Ballot results: Postponed Document Name: HL7 Version 3 Standard: Privacy, Access and Security Services (PASS) - Access Control, PIM Level, Release 1 Ballot Code: V3_PASS_AC_PIM_R1_TBD NIB Submitted By: Don Jorgenson 2010 Jan Ballot Cycle Info: INFORMATIVE Ballot results: Postponed Document Name: HL7 Version 3 Standard: Privacy, Access and Security Services (PASS) Architecture Framework, Release 1 Ballot Code: V3_PASS_AF_R1_I1_2010JAN NIB Submitted By: Don Jorgenson 2010 Jan Ballot Cycle Info: DSTU Ballot results: Met basic vote requirements for approval. 2 Negative votes to reconcile Document Name: Privacy, Access and Security Services (PASS) - Access Control, Release 1 Ballot Code: V3_PASS_AC_R1_D1_2010JAN NIB Submitted By: Don Jorgenson |
Misc Notes | Jan 2017: Received ANSI approval for HL7 Version 3 Standard: Privacy, Access and Security Services (PASS) Access Control, Release 1. July 2015: Work Group submitted a notification that they'd like to take Privacy, Access and Security Services Access Control Conceptual Model from DSTU to Normative, but submitting a new PSS to explain the updates made to the DSTU standard during it's test period. Sept 2012: TSC approved the DSTU publication request for HL7 Version 3 Standard: Privacy, Access and Security Services - Conceptual Model Access Control, Release 1 for 24 months thru Dec 12, 2014 July 2010: updated repository URL June 2010: Based on May 2010 ballot results, moved Next Milestone and Pjt End dates up one cycle. 11/23/2009: The TSC approved the alternate ballot date of 12 December 2009 for the following: HL7 Version 3 Standard: Privacy, Access and Security Services (PASS) Architecture Framework, Release 1 and Privacy, Access and Security Services (PASS) - Access Control, Release 1. |
U.S. Govt Interest? | |
USRSC Approval | |
FMG Approval | |
ARB Approval | |
Start Date | May 14, 2007 |
* A Project Insight User ID and password is required to access Project Insight. Contact the HL7 PMO at for more information.
Visit the Projects, Ballots and Standards Metrics Excel Report to view projects that are behind 120+ days along with other ballots and standards requiring a Work Group's attention.
Visit the Projects, Ballots and Standards Metrics Excel Report to view projects that are behind 120+ days along with other ballots and standards requiring a Work Group's attention.