60 likes | 184 Views
Clinical Data Portal Second Task Force Meeting…. Osman Ratib J. Michael McCoy Cason Lee. User Authentication. Transac. log. HIS / Mainframes. APP. Gateway. Web browsers. The PORTAL concept. Status flag Token User Profile …. 1. URL (web service). App ID. App ID Token
E N D
Clinical Data PortalSecond Task Force Meeting… Osman Ratib J. Michael McCoy Cason Lee
User Authentication Transac. log HIS / Mainframes APP Gateway Web browsers The PORTAL concept • Status flag • Token • User Profile • … 1 URL (web service) App ID • App ID • Token • Data type • Time stamp URL 2 URL/XML API 3
Data Portal System login Menu Ancillary Access labs lookup N Y Acct Pswd sync async MRN Facility 3 Demographics 1 SOAP SOAP SOAP CICS & Cobol CICS & Cobol CICS & Cobol MQ Series 2 OS390 Login ID MRN Accessed Function Code Date/Time racf ims audit • Improve Backend Infrastructure (Apache SOAP vs Systinet WASP) - - security (IP filtering vs 2-way certificate), performance • (WASP faster), open standards (SOAP, autogenerated WSDL, Integrated UDDI – able to support .NET) • 2. Adding backend driven audit trails • 3. Making audit services available to external developers Current architecture
Proof of Concepts Current Status In Progress Developer Developer Developer Developer XML String IP# XML String IP# XML Object IP# XML Object IP# 2-way SSL clear text clear text clear text clear text UDDI IP# IP# IP# IP# Authentication SOAP Demographics SOAP Demographics v2 Wasp Soap/Wsdl MRN Lookup Wasp Soap/Wsdl RMS to Encounter Reg Audit Soap Audit MQ IP# IP# IP# IP# Transact Proxy IP# IP# IP# IP# CICS & Cobol CICS & Cobol CICS & Cobol CICS & Cobol CICS & Cobol CICS & Cobol racf ims Ims/db2 Ims/db2 ims audit Work in progress Web Services OS390
Work in progress Audit Services J2EE Application InfoShare InfoShare Security Audits & Reporting SOAP SOAP MQ Patient Applications Security Audits & Reporting Encounter Registration Audit Service ADS+ Audit Cobol Audit * Required data ** Optional but being reconsidered *** Required but being reconsidered Non-Mainframe Based Audit Facility Benefits: Less restrictions, no downtime (Sunday midnight-2am) Considerations: Separate audit records, need to recreate correlation capabilities of MRN-UI-Pref_UI, Similarly lacking protection from falsified entries DB2 ADT Audit Tables UI, PRF_UI, *Facility, *MRN, *App Code, *RacfID, Time, TerminalID, RacfName, RacfGroup, **OperatorLocation, ***PatientName, InhouseLocation, DocumentArea, ControlNumber, KeyType, PartitionTable Benefits: Leverage existing audit capabilities, Auto correlation of MRN-UI-Pref_UI Considerations: Audit Integrity, Little path information, Little protection from falsified entries Existing In Progress Possibilities
Planning Tasks • Complete authentication applet • Complete log notification API • Update existing apps with new user login and transaction notification • Extend and implement standard XML portal for data retrieval • Develop the specifications for a notification mechanism for remote apps (broadcasting of data)