HIT Standards Committee Privacy and Security Workgroup Recommendations for Electronic Health Record (EHR) Query of Provider Directories Dixie Baker, Chair.

Slides:

Advertisements

Similar presentations

1 HIT Standards Committee Privacy and Security Workgroup: Reformatted Standards Recommendations & Implementation Guidance Dixie Baker, SAIC Steven Findlay,

Advertisements

IT Infrastructure Glen Marshall Siemens Health Solutions IHE IT Infrastructure Committee Co-chair.

January 19,2010 SOCIAL SECURITY ADMINISTRATION-HIT SUPPORT Healthcare Provider Directory (HPD) Standards and Transaction Discussion IHE TCON -2 January.

© 2011, Data Interchange Standards Association Provider Directory Presentation to: HIT Standard Committee Privacy & Security Work Group Presented by: Don.

Presented to: By: Date: Federal Aviation Administration Registry/Repository in a SOA Environment SOA Brown Bag #5 SWIM Team March 9, 2011.

Continuity of Change: Where We Have Come From, Where We Are Going New Orleans, LA June 5 th – 9 th, 2011 The Future Role of Vital Records’ Systems An Overview.

Electronic Submission of Medical Documentation (esMD) Face to Face Informational Session esMD Requirements, Priorities and Potential Workgroups – 2:00pm.

Provider Directories Deliberations NwHIN Power Team May 29, 2014.

Interoperability Kevin Schmidt Director, Clinical Network.

1 HIT Standards Committee Privacy and Security Workgroup: Recommendations Dixie Baker, SAIC Steven Findlay, Consumers Union August 20, 2009.

Overview of HITSC and S&I Framework Criteria to Evaluate Health IT Standard HL7 Clinical Quality Information Workgroup Walter G. Suarez, MD, MPH – Co-Chair,

S&I Framework Provider Directories Initiative esMD Work Group October 19, 2011.

Direct Implementation Perspective 0 Mark Bamberg, Vice President Research & Development MEDfx.

NHIN Specifications Richard Kernan, NHIN Specification Lead (Contractor), Office of the National Coordinator for Health IT Karen Witting, Contractor to.

NextGen Interoperability – Leading the Charge Presenter – David Venier DISCLAIMER: The views and opinions expressed in this presentation are those of the.

S&I Framework Doug Fridsma, MD, PhD Director, Office of Standards and Interoperability, ONC Fall 2011 Face-to-Face.

HIT Standards Committee Privacy and Security Workgroup: Standards for Consumer Engagement Dixie Baker, SAIC Steve Findlay, Consumers Union May 26, 2010.

Understanding and Leveraging MU2 Optional Transports Paul M. Tuten, PhD Senior Consultant, ONC Leader, Implementation Geographies Workgroup, Direct Project.

EsMD Background Phase I of esMD was implemented in September of It enabled Providers to send Medical Documentation electronically Review Contractor.

HIT Policy Committee Privacy and Security Tiger Team Deven McGraw, Chair Paul Egerman, Co-Chair Provider Authentication Recommendations November 19, 2010.

Data Gathering HITPC Workplan HITPC Request for Comments HITSC Committee Recommendations gathered by ONC HITSC Workgroup Chairs ONC Meaningful Use Stage.

HIT Standards Committee Privacy and Security Workgroup: Update Dixie Baker Dixie Baker, SAIC Steve Findlay Steve Findlay, Consumers Union December 18,

August 10, 2011 A Leading Provider of Consulting and Systems Engineering Services to Public Health Organizations.

Sept 13-15, 2004IHE Interoperability Workshop 1 Integrating the Healthcare Enterprise Overview of IHE IT Infrastructure Patient Synchronized Applications.

HIT Standards Committee Privacy and Security Workgroup Dixie Baker, Chair Walter Suarez, Co-Chair June 22, 2011.

HIT Standards Committee Privacy and Security Workgroup: Standards for Consumer Engagement Dixie Baker, SAIC Steve Findlay, Consumers Union April 28, 2009.

HIT Standards Committee HIT Standards Committee Privacy and Security Workgroup Discussion of NwHIN Power Team Recommendations August 6,

HIT Standards Committee Privacy and Security Workgroup Recommendations on Certification of EHR Modules Dixie Baker, Chair Walter Suarez, Co-Chair December.

HIT Policy Committee NHIN Workgroup Introductory Remarks David Lansky, Chair Pacific Business Group on Health Danny Weitzner, Co-Chair Department of Commerce,

HIT Standards Committee Privacy and Security Workgroup: Initial Reactions Dixie Baker, SAIC Steven Findlay, Consumers Union June 23, 2009.

Draft – discussion only Content Standards WG (Documents and Data) Proposed HITSC Workgroup Evolution 1 Architecture, Services & APIs WG Transport and Security.

Data Gathering HITPC Workplan HITPC Request for Comments HITSC Committee Recommendations gathered by ONC HITSC Workgroup Chairs ONC Meaningful Use Stage.

Planning the Future of CDC Secure Public Health Transactions and Public Health Information Network Messaging System (PHINMS) Jennifer McGehee, Tim Morris,

HIT Standards Committee Privacy and Security Workgroup Dixie Baker, Chair, Privacy and Security Workgroup Walter Suarez, Co-Chair, Privacy and Security.

HIT Policy Committee NHIN Workgroup Recommendations Phase 2 David Lansky, Chair Pacific Business Group on Health Danny Weitzner, Co-Chair Department of.

HIT Standards Committee Clinical Operations Workgroup Report Jamie Ferguson, Chair Kaiser Permanente John Halamka, Co-chair Harvard Medical School 20 August,

HIT Standards Committee Privacy and Security Workgroup: Privacy and Security Workgroup: Update Dixie Baker, SAIC Steve Findlay, Consumers Union March 24,

PD Provider Directories Initiative Overview PD January 20, 2012.

HIT Standards Committee NHIN Workgroup Introductory Remarks Farzad Mostashari Office of the National Coordinator for Health IT Douglas Fridsma Office of.

S&I Provider Directories Initiative Revisions to Initiative Charter July 1, 2011.

Information Exchange Workgroup Recommendations to HIT Policy Committee October 3, 2012 Micky Tripathi, Larry Garber.

HIT Standards Committee Privacy and Security Workgroup Final Recommendations for NwHIN Governance RFI Assigned Questions Dixie Baker, Chair Walter Suarez,

HIT Standards Committee Technical Review of The Direct Project Dixie Baker December 17, 2010.

Identity Proofing, Signatures, & Encryption in Direct esMD Author of Record Workgroup John Hall Coordinator, Direct Project June 13, 2012.

HIT Policy Committee Information Exchange Workgroup Micky Tripathi, Massachusetts eHealth Collaborative, Chair David Lansky, Pacific Business Group on.

HIT Standards Committee Clinical Operations Workgroup Jamie Ferguson, Kaiser Permanente John Halamka, Harvard Medical School June 23, 2009.

HIT Standards Committee NwHIN Power Team Preliminary Results Dixie Baker, Chair August 17,

November 10, 2009 SOCIAL SECURITY ADMINISTRATION-HIT SUPPORT Health IT Provider Registry IHE Proposal Overview Proposed Editor: Shanks Kande, Nitin Jain.

HIT Standards Committee Overview and Progress Report March 17, 2010.

HIT Standards Committee Privacy and Security Workgroup Dixie Baker, Chair, Privacy and Security Workgroup Walter Suarez, Co-Chair, Privacy and Security.

HIT Standards Committee Implementation Workgroup Judy Murphy, Aurora Health Care, Co-Chair Liz Johnson, Tenet Healthcare, Co-Chair June 22, 2011.

HIT Policy Committee Privacy and Security Tiger Team Deven McGraw, Chair Paul Egerman, Co-Chair October 20,

Mariann Yeager, NHIN Policy and Governance Lead (Contractor) Office of the National Coordinator for Health IT David Riley, CONNECT Lead (Contractor) Federal.

October 7, 2009 SOCIAL SECURITY ADMINISTRATION-HIT SUPPORT Health IT Provider Registry IHE Proposal Overview Proposed Editor: Shanks Kande, Marty Prahl.

Draft Provider Directory Recommendations Begin Deliberations re Query for Patient Record NwHIN Power Team July 10, 2014.

HIT Policy Committee NHIN Workgroup HIE Trust Framework: HIE Trust Framework: Essential Components for Trust April 21, 2010 David Lansky, Chair Farzad.

HIT Standards Committee Implementation Workgroup Aneesh Chopra Chief Technology Officer Office of Science & Technology Policy (OSTP) October 29, 2009.

HIT Standards Committee Privacy and Security Workgroup Standards and Certification Requirements for Certified EHR Modules Dixie Baker, Chair Walter Suarez,

Privacy and Security Tiger Team Potential Questions for Request for Comment Meaningful Use Stage 3 October 3, 2012.

HIT Standards Committee Implementation Workgroup Liz Johnson, Tenet Healthcare, Co-Chair Judy Murphy, Aurora Health Care, Co-Chair November 16, 2011.

HITPC Meaningful Use Stage 3 RFC Comments July 22, 2013 Information Exchange Workgroup Micky Tripathi.

1 HIT Standards Committee Hearing on Health Information Technology Security Issues, Challenges, Threats, and Solutions - Introduction Dixie Baker, SAIC.

HIT Standards Committee Privacy and Security Workgroup Progress Report on Review of Governance RFI Dixie Baker, Chair Walter Suarez, Co-Chair May 24, 2012.

HIT Standards Committee Privacy and Security Workgroup Task Update: Standards and Certification Criteria for Certifying EHR Modules Dixie Baker, Chair.

Provider Directories Tasking, Review and Mod Spec Presentation NwHIN Power Team April 17, 2014.

Data Gathering HITPC Workplan HITPC Request for Comments HITSC Committee Recommendations gathered by ONC HITSC Workgroup Chairs ONC Meaningful Use Stage.

Workgroup Introduction & Trust Mark Briefing Transport & Security Standards Workgroup September 22, 2014.

HIT Standards Committee Implementation Workgroup Liz Johnson, Tenet Healthcare, Co-Chair Judy Murphy, Aurora Health Care, Co-Chair October 27, 2010.

HIT Standards Committee NwHIN Power Team Dixie Baker, Chair July 20,

Presentation transcript:

HIT Standards Committee Privacy and Security Workgroup Recommendations for Electronic Health Record (EHR) Query of Provider Directories Dixie Baker, Chair Walter Suarez, Co-Chair May 18, 2011

Privacy and Security Workgroup Dixie Baker, SAIC John Blair, Taconic Anne Castro, BlueCross BlueShield of South Carolina Aneesh Chopra, Federal Chief Technology Officer Mike Davis, Veterans Health Administration Lisa Gallagher, HIMSS Ed Larsen David McCallie, Cerner Corporation John Moehrke, General Electric Steve Findlay, Consumers Union Jeff Jonas, IBM Wes Rishel, Gartner Walter Suarez, Kaiser Permanente Sharon Terry, Genetic Alliance

Needs Identified by HIT Policy Committee Identified need for consistent approach to cross-organizational provider directories to support the exchange of health information September 2010 Testimony resulted in narrowing of focus to: 1.Interoperability among existing directories (no rip and replace) 2.Interoperability between EHRs and provider directories: Capability for EHRs to query national (federated) enterprise-level provider directory Central need: Capability to search for and find discoverable information essential for enabling exchange of health information between enterprises Enterprise-level provider directory (ELPD) content should be limited to: 1.Basic entity information (e.g., name, address, human point-of-contact) 2.Externally accessible information exchange services (e.g., domains, message protocols, transport protocols, inbox locations) 3.Security credentials

Two-Phased Approach for Developing Recommendations for Provider Directory Standards 1.To meet immediate need for standards to support Stage 2 EHR certification, recommend standards, implementation specifications, and certification criteria for EHR query of enterprise-level provider directories Recommendations presented today 2.Develop recommendations for Enterprise-Level and Individual- Level Provider Directories in concert to address needs identified by the HIT Policy Committee Recommendations for Enterprise-Level Provider Directories received in February 2011 HITPC approved Information Exchange Workgroups recommendations for Individual-Level Provider Directories May 11, 2011

Standards Requirements

Public Testimony Received to Date by the P&S WG NwHIN requirements for directory services Direct Project Exchange Veterans Health Administration HIEs Department of Vermont Health Access New England Healthcare Exchange Network (NEHEN) Standards Integrating the Healthcare Enterprise (IHE) Healthcare Provider Directory (HPD) Profile and Social Security Administration (SSA) experience with IHE HPD ASC X12 Provider Directory transaction HL7/OMGs collaborative effort on the Healthcare and Community Services Provider Directory (HCSPD)

Scope of Current Recommendation Standards, implementation specifications, and certification criteria to support Stage 2 meaningful-use of EHRs to query enterprise- level provider directories Standards and implementation specifications needed: –Schema –Vocabulary –Transport –Query Language Certification functionality needed: –Search for and discover entity (i.e., search => list => select) –Search for and discover services entity offers for exchanging information with other entities (including entitys URL or electronic address to receive information) –Search for and discover entitys security credential

NwHIN Standard Discovery of Entities Discovery of Exchange Capabilities Discovery of Security Credentials Transport Standard DirectDNSNonePrimarily DNS; some LDAP 1 SMTP ExchangeServices Registry UDDI v3 over SOAP mPKI CASOAP 1 While the LDAP family of standards does not explicitly address identity federation, multiple strategies exist for federating LDAP directories. Because DNS is inherently federated, the Direct Project chose to use it for credential discovery, while recognizing that an LDAP approach would be a more complete solution. Current NwHIN Standards

Standards/ Profiles Schema (Structure) Standards of the Query/Response message between EHR and PD Content (Vocabulary) Standards of the Query/Response message between EHR and PD Transport Standards of the Query/Response message between EHR and PD Query Language IHE HPDLDAP/DSML (DSML is XML representation of LDAP data model) LDAP + ISODSML supports both SOAP and REST LDAP ASC X12N 274 X12X12 Data Dictionary; External Code Sets for selected data elements Not defined; Supports SOAP, REST, other ITI-58 HL7/OMG HCSPD Not specified Expected to support both SOAP and REST Not specified Comment: HCSPD exists in abstract form only – HL7 has defined the requirements, and OMG is currently specifying the standard for meeting these needs. The OMG work is expected to be completed in 1 year. Schema, Content, Transport, and Query Standards

Standards/ Profiles Supports Discovery of Entity Supports Discovery of Entitys Services and IE Capabilities Supports Discovery of Entitys Security Credentials Supports Discovery of Individual Provider 1 Supports Discovery of Individual Providers Locations 1 IHE HPDYes ASC X12N 274 No Comment: The X transaction is a push transaction used mainly by provider entities to send their lists of providers to a health plan. X12 has expressed its willingness to work with the HITSC to adapt X274 to support the ELPD query functionality. HL7/OMG HCSPD In scope Comment: HCSPD exists in abstract form only – HL7 has defined the requirements, and OMG is currently specifying the standard for meeting these needs. The OMG work is expected to be completed in 1 year. 1 Individual-Level Provider Directories are outside the scope of the current task, but need to be anticipated Functionality Supported

Recommended Standards, Implementation Specifications, and Certification Criteria RequirementStandardImplementation Specification Certification Criteria SchemaDSMLIHE HPD subsetCapability to securely send to an ELPD service a DSML query for entities, and entities exchange services, and to receive a response, as specified in the IHE HPD profile. Capability to enable a user or software to list and select from ELPD responses. Capability to retrieve the digital certificate for a selected entity. VocabularyLDAP + ISOIHE HPD subset TransportREST or SOAP 1 IHE HPD Query LanguageLDAPIHE HPD + HPD Federation Profile 2 1 The Standards and Interoperability Framework team should select either REST or SOAP, as most appropriate within the context of the NwHIN standards currently being defined. 2 To support LDAP federation, a profile specifying a standardized way to federate LDAP directories is needed.