esMD Author of Record L1 Use Case Meeting

1. esMD Author of Record L1Use Case Meeting Wednesday, July 25, 2012

2. Meeting Etiquette From S&I Framework to Participants: Hi everyone: remember to keep your phone on mute  NOTE: This meeting is being recorded and will be posted on the esMD Wiki page after the meeting • Please announce your name each time prior to making comments or suggestions during the call • Remember: If you are not speaking keep your phone on mute • Do not put your phone on hold – if you need to take a call, hang up and dial in again when finished with your other call • Hold = Elevator Music = very frustrated speakers and participants • This meeting, like all of our meetings, is being recorded • Another reason to keep your phone on mute when not speaking! • Feel free to use the “Chat” or “Q&A” feature for questions or comments

3. Use Case Overview Agenda

4. Announcements • The Author of Record Charter is now consensus approved and available on the esMD Wiki. • Thanks to everyone who took the time to review the AoR Charter and for providing their consensus votes.

5. Recap of Last Week • Kicked off the Author of Record Level 1 Use Case Workgroup • Reviewed Draft Context Diagram • Lenel James and Keith Salzman volunteered to provide feedback • Reviewed draft In-Scope/Out-of-scope items • Preliminarily reviewed approaches for the four proposed Sub-Workgroups

6. Today’s Objectives • Review community feedback from the homework items from last week • Introduce the draft User Story, Actors and Roles, Communities of Interest, and Glossary of Terms • Discussion of the Sub-workgroups introduced last week

7. AoR L1 – Draft Context DiagramDigital Identities and Bundle Level Signatures Registration Authority Certificate Authoritity External Provider Directory Gateway Provider Entity Payer Entity esMD UC 1: Provider Registration Contractors / Intermediaries Agent esMD UC 2: Secure eMDR Transmission Provider (Individual or Organization) Payer Payer Internal System esMD AoR Level 1 Digital Identities Bundle Signatures Digital Signature on Aggregated Document Bundle

8. Scope AoR (L1) Out of Scope Interactions between: • Payer and its Payer Contractors • Provider and its Agent • Payer or Payer Contractor and its Gateway Transaction level encryption Document level signatures and individual contribution signatures Defining delegation of rights within and between Providers and other authors • In Scope • Identity Proofing as part of Non-Repudiation of Actor Identity • Digital Credential Management required for Non-Repudiation Actions (Signingand Delegation), Data Integrity and Encryption • Digital Signatures and Signature Artifacts for Identity and Non-Repudiation • Digital Credentials and Artifacts for Non-Repudiation of Delegation as required by UC1 and AoR L1 • Data Integrity requirement actions and artifacts • Encryption of PHI requirements • Interactions between Provider Entity or Payer Entity and : • Certificate Authority • Registration Authority • External Provider Directory • And each other

9. Introductions to the next few Use Case Sections Glossary of Terms Communities of Interest Actors & Roles User Stories

10. Glossary of Terms Posted here - http://wiki.siframework.org/AoR+L1+Use+Case+-+Glossary+of+Terms

11. Communities of Interest Section Description: The Communities of Interest section identifies relevant stakeholders that are potentially affected by the content of the Use Case. This list may vary per Initiative, but the stakeholder definitions will be consistent throughout the S&I Framework (where appropriate), as defined by the Use Case Simplification Workgroup (examples included below). Wiki link - http://wiki.siframework.org/UC+Simplification+-+Stakeholder+Classification+SWG

12. Actors and Roles Table (1 of 2) This table outlines the business actors that are participants in the information exchange requirements for each scenario. A business actor is a person or organization that directly participates in a scenario. Thus, as a person or organization, the actor can (and should) be a stakeholder. NOTE: A Business Actor may be a Stakeholder and also can have more than one role.

13. Actors and Roles Table (2 of 2) This table outlines the business actors that are participants in the information exchange requirements for each scenario. A business actor is a person or organization that directly participates in a scenario. Thus, as a person or organization, the actor can (and should) be a stakeholder. NOTE: A Business Actor may be a Stakeholder and also can have more than one role.

14. User Story / Workflow • Overall User Story Components • All Actors obtain and maintain a non-repudiation digital identity • Provider registers for esMD (see UC1)* • Payer requests documentation (see UC2)* • Provider submits digitally signed document (bundle) to address request by payer • Payer validates submission artifacts *User Stories for esMD UC 1 and 2 have already been defined. Workgroup will help further define bullets 1), 4), and 5)

15. Draft User Story Content (1 of 2)

16. Draft User Story Content (2 of 2)

17. Draft User Story Content (2 of 2)

18. AoR Subworkgroup Discussion Dan Kalwa & Bob Dieterle

19. Areas to Address (Recap from 7/20) *Non-repudiation (NIST) - Non-repudiation is a service that is used to provide assurance of the integrity and origin of data in such a way that the integrity and origin can be verified by a third party. This service prevents an entity from successfully denying involvement in a previous action. **Data Integrity (NIST) - Data integrity is a property whereby data has not been altered in an unauthorized manner since it was created, transmitted or stored. Alteration includes the insertion, deletion and substitution of data.

20. User Story Components / Workflow / Sub-workgroups (4) Note - Sub-workgroup leaders, charge, meeting schedule, and deliverables is TBD at this time

21. User Story -- Additional Components / Workflow

22. Get Involved in the SWGs!

23. AoR Use Case Schedule and Timeline*Note – Weekly Meetings on Wednesdays and Fridays • Use Case Kick Off • UC Overview • Context Diagrams • Areas to Address • In-Scope/Out-of-Scope • Introduce SWG • Review HW items • Glossary of Terms • Communities of Interest • Actors & Roles • User Story • Review 7/25 items • Discuss detailed charge of each SWG • Assumptions • Pre Conditions • Post Conditions HW items for 7/24 Review and provide feedback on 7/20 discussion July 2012 HW items for 8/1 Review and provide feedback on 7/25 & 7/27 discussions 23

24. Next Steps / Reminders • Need Volunteers to review the following by Friday 7/27 • Glossary Review http://wiki.siframework.org/AoR+L1+Use+Case+-+Glossary+of+Terms • Communities of Interest for any that we have not identified • Actors and Roles • Need Volunteers to draft a first pass for the following by next Wednesday 8/1 • User Story based on the bullets presented earlier