1. Meeting Etiquette Please announce your name each time prior to making comments or suggestions during the call Remember: If you are not speaking keep your phone on mute Do not put your phone on hold – if you need to take a call, hang up and dial in again when finished with your other call –Hold = Elevator Music = very frustrated speakers and participants This meeting, like all of our meetings, is being recorded –Another reason to keep your phone on mute when not speaking! Feel free to use the “Chat” or “Q&A” feature for questions or comments, especially if you have a bad phone connection or background noise in your environment NOTE: This meeting is being recorded and will be posted on the Wiki page after the meeting From S&I Framework to Participants: Hi everyone: remember to keep your phone on mute 0

2. RESTful Health Exchange (RHEx) Security Profiles WebEx #4 August 9, 2012 Powering Secure, Web-Based Health Data Exchange wiki.siframework.org/RHEx DRAFT—for discussion purposes only

3. What is RHEx (Refresher from WebEx 1) An open source, exploratory project to apply proven web technologies to demonstrate a simple, secure, and standards-based health information exchange –Sponsored by the Federal Health Architecture (FHA) program –Called RESTful Health Exchange (RHEx) –Intended to inform a path forward on a RESTful health exchange A Fiscal Year 2012 project being demonstrated in 2 phases –Phase I: Security approach for a RESTful health information exchange (April-July 2012) –Phase II: Content approach for a RESTful health information exchange (July-September 2012) Download the recording or briefing from the 1 st WebEx here: http://wiki.siframework.org/RHEx+Materials http://wiki.siframework.org/RHEx+Materials 2

4. Security Profile Feedback We’d like to walk through the security profiles and get your feedback. These include: –The RHEx Draft OAuth 2 Profile –The RHEx Draft OpenID Connect Profile Questions For You: –Have we addressed all of the key elements, questions and concerns? –Are there areas that you would like us to elaborate on further? –What other thoughts, questions, comments would you like to share? Let’s walk through it on the wiki: RHEx Community FeedbackRHEx Community Feedback 3

5. WebEx Schedule (tentative) DateTopicPresenter June 28Overview/Kick-OffMary Pulvermacher July 12Charter DiscussionRick Cagle July 26RHEx Security ApproachJustin Richer August 9Phase I Profile DiscussionRick Cagle and Rob Dingwell August 23RHEx Content ApproachAnne Kling August 30Phase II Profile DiscussionAndy Gregorowicz September 6RHEx Test FrameworkJason Matthews September 20Lessons Learned from RHEx Pilots Suzette Stoutenburg September 27Wrap-Up and Next StepsMary Pulvermacher 4

6. Reminders 5 This FY12 project seeks community engagement: –Visit the RHEx wiki for more information: wiki.siframework.org/RHEx wiki.siframework.org/RHEx –Join the community discussion on Google GroupsGoogle Groups Also accessible through the wiki –Participate in bi-weekly WebEx meetings (see S&I calendar)calendar Thursdays, 11 am – 12 pm EDT (from June 28 – Sept 27) –Share your perspectives Please share use cases where a RESTful approach may apply Let us know if you would like additional information

7. Powering Secure, Web-Based Health Data Exchange http://wiki.siframework.org/RHEx