OverviewTopPackageElement
SecurityAndPrivacy UML Documentation

SecurityAndPrivacy

The FHIM Security and Privacy domain models information related to access-control policies and their enforcement. While historically security and patient-defined consent have been viewed as separate subjects, in effect they are enforced the same way, especially in a distributed environment. For example, there is no functional difference between the enforcement of a corporate policy that declares that only mental health specialists can see mental health data and the enforcement of a patient’s directive to grant visibility of their mental-health related medications to their primary physician, but not to their dentist.
The FHIM Security and Privacy domain is closely based on the HL7 Security and Privacy Domain Analysis Model (DAM) of May 2010. There are however, several important differences between this FHIM model and the DAM: a) The DAM has SecurityRole as a subtype of CompositePolicy. We made it an association instead. Then, because both BasicPolicy and CompositePolicy have associations to SecurityRole, we moved the association to Policy, which is the common supertype of both BasicPolicy and CompositePolicy. b) The DAM models JurisdictionalOrganization and ProviderOrganization as subtypes of Authority. Indeed, ProviderOrganization is also a subtype of Grantee (multiple-inheritance). In the FHIM, ProviderOrganization and JurisidictionalOrganization are existing stand-alone concepts. So we changed the inheritance relationship to association relationships. c) The DAM models Patient and Population as subtypes of SubjectOfRecord. In the FHIM, Patient and Population are existing stand-alone concepts. So we changed the inheritance relationship to association relationships.
There are some outstanding issues as well. We need to better understand the PrivateInsurance and PublicServices classes. These appear to mimic E/E/COB classes, but the purpose for these is unclear. HL7 already has an exhaustive list of coverage types. Should OrganizationalProvider be an Entity rather than a Role?

_SecurityAndPrivacy
data Property data Property data data Property Property provision_data Polyline coordinates describing hotspot on the image actor Property actor Property actor actor Property Property provision_actor Polyline coordinates describing hotspot on the image provision Property provision Property provision provision Property Property consentDirective_provision Polyline coordinates describing hotspot on the image verification Property verification Property verification verification Property Property consentDirective_verification Polyline coordinates describing hotspot on the image patient Property patient Property patient patient Property Property subjectOfRecord_patient Polyline coordinates describing hotspot on the image person Property person Property person person Property Property authority_person Polyline coordinates describing hotspot on the image healthcareProvider Property healthcareProvider Property healthcareProvider healthcareProvider Property Property privacyRule_healthcareProvider Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image clinicalCondition Property clinicalCondition Property clinicalCondition clinicalCondition Property Property informationResource_clinicalCondition Polyline coordinates describing hotspot on the image patient Property patient Property patient patient Property Property consentDirective_subjectOfConsent Polyline coordinates describing hotspot on the image client Property client Property client client Property Property consenter_client Polyline coordinates describing hotspot on the image securityLabelCategory Property securityLabelCategory Property securityLabelCategory securityLabelCategory Property Property securityLabel_securityLabelCategory Polyline coordinates describing hotspot on the image securityLabelHandling Property securityLabelHandling Property securityLabelHandling securityLabelHandling Property Property securityLabel_securityLabelHandling Polyline coordinates describing hotspot on the image securityLabelHeader Property securityLabelHeader Property securityLabelHeader securityLabelHeader Property Property securityLabel_securityLabelHeader Polyline coordinates describing hotspot on the image spif Property spif Property spif spif Property Property securityLabelHeader_spif Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image grantor Property grantor Property grantor grantor Property Property delegationPolicy_grantor Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image authenicationToken Property authenicationToken Property authenicationToken authenicationToken Property Property trustFramework_authenicationToken Polyline coordinates describing hotspot on the image policyConstraint Property policyConstraint Property policyConstraint policyConstraint Property Property trustContract_policyConstraint Polyline coordinates describing hotspot on the image authenicationToken Property authenicationToken Property authenicationToken authenicationToken Property Property trustContract_authenicationToken Polyline coordinates describing hotspot on the image publishedPolicy Property publishedPolicy Property publishedPolicy publishedPolicy Property Property consentDirective_publishedPolicy Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image securityLabel Property securityLabel Property securityLabel securityLabel Property Property informationResource_securityLabel Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image securityGroup Property securityGroup Property securityGroup securityGroup Property Property initiator_securityGroup Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image grantor Property grantor Property grantor grantor Property Property privacyRule_grantor Polyline coordinates describing hotspot on the image grantee Property grantee Property grantee grantee Property Property privacyRule_grantee Polyline coordinates describing hotspot on the image informationType Property informationType Property informationType informationType Property Property privacyRule_informationType Polyline coordinates describing hotspot on the image securityRole Property securityRole Property securityRole securityRole Property Property policy_securityRole Polyline coordinates describing hotspot on the image policy Property policy Property policy policy Property Property initiator_policy Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image policy Property policy Property policy policy Property Property compositePolicy_policy Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image policy Property policy Property policy policy Property Property securityRole_policy Polyline coordinates describing hotspot on the image provision Property provision Property provision provision Property Property provision_provision Polyline coordinates describing hotspot on the image consenter Property consenter Property consenter consenter Property Property consentDirective_consenter Polyline coordinates describing hotspot on the image subjectOfRecord Property subjectOfRecord Property subjectOfRecord subjectOfRecord Property Property informationResource_subjectOfRecord Polyline coordinates describing hotspot on the image population Property population Property population population Property Property subjectOfRecord_population Polyline coordinates describing hotspot on the image coverageType Property coverageType Property coverageType coverageType Property Property informationResource_coverageType Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image grantee Property grantee Property grantee grantee Property Property consenter_grantee Polyline coordinates describing hotspot on the image authority Property authority Property authority authority Property Property grantee_authority Polyline coordinates describing hotspot on the image informationObject Property informationObject Property informationObject informationObject Property Property permission_informationObject Polyline coordinates describing hotspot on the image informationObject Property informationObject Property informationObject informationObject Property Property informationResource_informationObject Polyline coordinates describing hotspot on the image permission Property permission Property permission permission Property Property permissionCatalog_permission Polyline coordinates describing hotspot on the image grantee Property grantee Property grantee grantee Property Property delegationPolicy_grantee Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image userIdentity Property userIdentity Property userIdentity userIdentity Property Property initiator_userIdentity Polyline coordinates describing hotspot on the image trustFramework Property trustFramework Property trustFramework trustFramework Property Property initiator_trustFramework Polyline coordinates describing hotspot on the image trustContract Property trustContract Property trustContract trustContract Property Property trustFramework_trustContract Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image Generalization Polyline coordinates describing hotspot on the image securityRole Property securityRole Property securityRole securityRole Property Property initiator_securityRole Polyline coordinates describing hotspot on the image securityLabel Property securityLabel Property securityLabel securityLabel Property Property clearance_securityLabel Polyline coordinates describing hotspot on the image securityContext Property securityContext Property securityContext securityContext Property Property initiator_securityContext Polyline coordinates describing hotspot on the image operation Property operation Property operation operation Property Property permission_operation Polyline coordinates describing hotspot on the image clearance Property clearance Property clearance clearance Property Property initiator_clearance Polyline coordinates describing hotspot on the image authenicationToken Property authenicationToken Property authenicationToken authenicationToken Property Property initiator_authenicationToken Polyline coordinates describing hotspot on the image child hierarchicalgroup child hierarchicalgroup child child hierarchicalgroup hierarchicalgroup hierarchicalGroup_hierarchicalGroup Polyline coordinates describing hotspot on the image parent Property parent Property parent parent Property Property clearance_hierarchicalGroup Polyline coordinates describing hotspot on the image reference meaning ProvisionData role reference ProvisionActor verificationDate verifiedWith isVerified Verification securityLabel purpose period kind dataPeriod code classification action Provision Person HealthcareProvider status patientId mothersIdentifier endDate beginDate Patient Comment condition ClinicalCondition Comment sensitivityField provenance privacyPolicy integrity compartment SecurityLabelCategory refrainPolicy purposeOfUse privacyMarkLabel obligationLabel SecurityLabelHandling purposeOfUse PurposeOfUsePolicy flagTextToBeRendered PrivacyMarkPolicy identifier SecurityLabelHeader identifier effectiveDateRange SecurityPolicyInformationFile ResourcePolicy ContextualPolicy RelationshipPolicy RolePolicy GroupPolicy Execute Delete Update Read Create Use Collection Disclosure Access OperationType compositePolicy PolicyConstraint policyRule PrivacyPolicy InitiatorBasedPolicy privacyPolicy securityRole purposeOfUse privacyPolicyLawType refrainCode enablesOperation effectiveTime accessRestrictionOverride PrivacyRule uri status name mimeType identifier effectiveTime description authority Policy status sourceReference sourceAttachment scope performer organization identifier dateCreated category ConsentDirective sensitivity SubjectOfRecord identifier existenceDateRange description Population policyCategory PolicyProgramSource grantingEntity Grantor signatureRecorded relationship Consenter domain authorityType Authority sensitivity identifier category InformationObject refrainPolicyType RefrainPolicy version status name PermissionCatalog obligationPolicyType ObligationPolicy grantedEntity Grantee deligationPolicyType accessRight DelegationPolicy ConstraintPolicy route levelOfAssurance enablesAuthorization authorizationPolicyType allowableAccessTime AuthorizationPolicy status serviceDeliveryLocation name identifier UserIdentity trustPolicyLabel trustMechanismLabel trustFrameworkLabel trustCertificateLabel trustAssuranceLabel trustAccreditationCode TrustFramework domainAuthority TrustContract roleName roleCode StructuralRole roleIdentifier permission objectIdentifier name description authorityIdentifierName SecurityRole classificationLabel SecurityLabel SecurityGroup status route effectiveTime description contextType contextId SecurityContext version identifier description Permission operation Operation profileType initiatorType initiatorName initiatorIntegrityStatus effectiveDate confidentialityType accessControlId Initiator resourcePolicy confidentialityIndicator category InformationResource HierarchicalGroup roleName roleCode FunctionalRole FunctionalGroup CompositePolicy ClearancePolicy roleId roleCode name clearancePolicy allowedSensitivity Clearance tokenTypeCode tokenId levelOfAssurance claimedClearance AuthenticationToken securityContext implementableRule ruleText AtomicPolicy

Classifiers
AtomicPolicy AtomicPolicy
AuthenticationToken AuthenticationToken
Authority Authority
AuthorizationPolicy AuthorizationPolicy
Clearance Clearance
ClearancePolicy ClearancePolicy
ClinicalCondition ClinicalCondition
CompositePolicy CompositePolicy
ConfidentialityType ConfidentialityType
ConsentDirective ConsentDirective
Consenter Consenter
ConstraintPolicy ConstraintPolicy
ContextualPolicy ContextualPolicy
DelegationPolicy DelegationPolicy
FunctionalGroup FunctionalGroup
FunctionalRole FunctionalRole
Grantee Grantee
Grantor Grantor
GroupPolicy GroupPolicy
HierarchicalGroup HierarchicalGroup
InformationObject InformationObject
InformationResource InformationResource
Initiator Initiator
InitiatorBasedPolicy InitiatorBasedPolicy
ObligationPolicy ObligationPolicy
Operation Operation
OperationType OperationType
Permission Permission
PermissionCatalog PermissionCatalog
Policy Policy
PolicyConstraint PolicyConstraint
PolicyProgramSource PolicyProgramSource
Population Population
PrivacyMarkPolicy PrivacyMarkPolicy
PrivacyPolicy PrivacyPolicy
PrivacyRule PrivacyRule
Provision Provision
ProvisionActor ProvisionActor
ProvisionData ProvisionData
PurposeOfUsePolicy PurposeOfUsePolicy
RefrainPolicy RefrainPolicy
RelationshipPolicy RelationshipPolicy
ResourcePolicy ResourcePolicy
RolePolicy RolePolicy
SecurityContext SecurityContext
SecurityGroup SecurityGroup
SecurityLabel SecurityLabel
SecurityLabelCategory SecurityLabelCategory
SecurityLabelHandling SecurityLabelHandling
SecurityLabelHeader SecurityLabelHeader
SecurityPolicyInformationFile SecurityPolicyInformationFile
SecurityRole SecurityRole
StructuralRole StructuralRole
SubjectOfRecord SubjectOfRecord
TrustContract TrustContract
TrustFramework TrustFramework
UserIdentity UserIdentity
Verification Verification

Diagrams
_SecurityAndPrivacy _SecurityAndPrivacy

Properties:

Alias
Keywords
NameSecurityAndPrivacy
Name Expression
NamespaceFHIM
Nesting PackageFHIM
Owned Template Signature
OwnerFHIM
Owning Template Parameter
Qualified NameFHIM::SecurityAndPrivacy
Stereotype
Template Parameter
VisibilityPublic
OverviewTopPackageElement
SecurityAndPrivacy UML Documentation