1. Electronic Health Record Access Control 7
Document Request
Authorization
Decisions
Security Labeling
Service (SLS)
External Authority
Document
Orchestration 5 4
Decomposed Clinical Document
(CLINICAL FACTS)
Mapped Clinical
Facts
Label Rules Generation
Rules Engine
Raw CDA Document
Authorization
Obligations
Security
Risk
Assessment /
Policy 8 2
Labeling
Rules 3
Transform Template(s)
Transform Actions
Redact, Annotate,
Mask(Encrypt)
Annotated (classified)
Document
SNOMED-CT
RxNORM
ICD
LOINC
HL7 Vocabularies
Patient Restrictions
Jurisdictional Policy
Organizational Policy
HL7 Security and Privacy Vocabulary
-OR-
Document Packaging
(Encrypt)
Annotated (classified)
Composite Documents
Clinical
Administration
Clinician
Clinical Fact-AKA Clinical object, e.g., observation, medication, procedure, lab results etc.
Clinical Administration: Clinical Facts are captured into EHR with standard information attributes according to documentation rules, guidelines in Organizational and Jurisdictional Policies by properly knowledgeable health care professionals
Security/Privacy Administration: Patient restrictions are captured into EHR as part of the formal record
Security/Privacy
Administration
Privacy Office
Release of Information Office
Business Stakeholder
Security Administration 6 1
Clinical Facts extracted from source documentation
Clinical Facts mapped to EHR objects e.g., Lab Report{HIV…}
Label Rules created based on Risk Assessment
Label Rules installed in SLS Rules Engine
Clinical Facts extracted from source document
SLS applies labeling rules and document transforms
Authorization Decision made based on Security Label
Package forwarded for delivery