Cross-Enterprise Security and Privacy Authorization (XSPA) Demonstration

 

The purpose of the TC is to specify sets of stable open OASIS standards and interoperability profiles, and create other standards or profiles as needed, to support secure and private exchange of healthcare information. Work to date supports and has been accepted by the US Department of Health and Human Services Health Information Technology Standards Panel (HITSP) Access Control Transaction Package specification TP20, including access control capabilities required to support the HITSP Manage Consent Directive Package specification TP30. This includes the exchange of access control decision information such as requestor identity, role data, location that can be used by healthcare providers to enforce permitted operations on resources and associated conditions and obligations. The OASIS standards and profiles provide advanced security, privacy and integrity of sensitive patient data end to end.


Demonstration participants

You can visit these companies' web sites by clicking on their logos, or drop by their demonstrations at the event.


  • United States Department of Veterans Affairs

     

  • Jericho
  •  

  • Sun Microsystems

     

  • IBM

     

  • United States Department of the Navy