Meeting Etiquette• Please announce your name each time prior to making comments or

suggestions during the call• Remember: If you are not speaking keep your phone on mute• Do not put your phone on hold – if you need to take a call, hang up

and dial in again when finished with your other call – Hold = Elevator Music = very frustrated speakers and participants

• This meeting, like all of our meetings, is being recorded– Another reason to keep your phone on mute when not speaking!

• Feel free to use the “Chat” or “Q&A” feature for questions or comments, especially if you have a bad phone connection or background noise in your environment

NOTE: This meeting is being recorded and will be posted on the Wiki page after the meeting

From S&I Framework to Participants:Hi everyone: remember to keep your phone on mute

1

RESTful Health Exchange (RHEx)Security ProfilesWebEx #4

August 9, 2012

Powering Secure, Web-Based Health Data Exchangewiki.siframework.org/RHEx

DRAFT—for discussion purposes only

3

What is RHEx (Refresher from WebEx 1)

• An open source, exploratory project to apply proven web technologies to demonstrate a simple, secure, and standards-based health information exchange

– Sponsored by the Federal Health Architecture (FHA) program

– Called RESTful Health Exchange (RHEx)

– Intended to inform a path forward on a RESTful health exchange

• A Fiscal Year 2012 project being demonstrated in 2 phases– Phase I: Security approach for a RESTful health information

exchange (April-July 2012)

– Phase II: Content approach for a RESTful health information exchange (July-September 2012)

Download the recording or briefing from the 1st WebEx here: http://wiki.siframework.org/RHEx+Materials

4

Security Profile Feedback

• We’d like to walk through the security profiles and get your feedback. These include:– The RHEx Draft OAuth 2 Profile– The RHEx Draft OpenID Connect Profile

• Questions For You:– Have we addressed all of the key elements, questions and

concerns?– Are there areas that you would like us to elaborate on

further?– What other thoughts, questions, comments would you like

to share?• Let’s walk through it on the wiki:

RHEx Community Feedback

5

WebEx Schedule (tentative)

Date Topic PresenterJune 28 Overview/Kick-Off Mary PulvermacherJuly 12 Charter Discussion Rick CagleJuly 26 RHEx Security Approach Justin RicherAugust 9 Phase I Profile Discussion Rick Cagle and Rob

Dingwell August 23 RHEx Content Approach Anne KlingAugust 30 Phase II Profile Discussion Andy Gregorowicz

September 6 RHEx Test Framework Jason MatthewsSeptember 20 Lessons Learned from RHEx

PilotsSuzette Stoutenburg

September 27

Wrap-Up and Next Steps Mary Pulvermacher

6

Reminders

• This FY12 project seeks community engagement:

– Visit the RHEx wiki for more information: wiki.siframework.org/RHEx

– Join the community discussion on Google Groups

• Also accessible through the wiki

– Participate in bi-weekly WebEx meetings (see S&I calendar)

• Thursdays, 11 am – 12 pm EDT (from June 28 – Sept 27)

– Share your perspectives

• Please share use cases where a RESTful approach may apply

• Let us know if you would like additional information

Powering Secure, Web-Based Health Data Exchange

http://wiki.siframework.org/RHEx