The standard provides: a method of incorporating digital signatures and delegation of right assertions into the header of a CDA Document for Attachments in the sdtc:signatureText element. a digital signature standard for a CDA Document for Attachments that supports the exchange of a signed: digest of the message timestamp role of the signer purpose of signature a digital signature standard for: the public certificate of the signer long term validation data, including Online Certificate Status Protocol (OCSP) response and/or Certificate Revocation List (CRL) a standard to assert a delegation of rights that supports the exchange of: the certificate ID of both parties the purpose of the delegation the effective date of the assertion a method to validate an existing delegation of rights assertion The ability to provide Digital Signatures and Delegation of Rights Assertion artifacts can be achieved with existing standards. The capability may be provided as a service by third parties or incorporated directly into or provided in conjunction with EHRs and payer systems. E.1 User Story– Digital Signature by Authorized Signer The Authorized Signer digitally signs the document establishing the signer’s role and purpose of signature. The Authorized Signer sends the signed document to the Recipient. The Recipient receives the Signed Document and authenticates the Authorized Signer’s digital certificate, the signature artifact, and validates the data integrity of the document. In order to participate in digital signing, the Authorized Signer obtains and maintains an X.509v3 digital signing certificate. Entities approved by a Registration Authority will receive the X.509v3 certificate from a Certificate Authority to incorporate into their business process. The Authorized Signer creates a Digital Signature artifact incorporating role, purpose of signature, and date/time of the signature and inserts it into the sdtc:signatureText element. The Authorized Signer, who has satisfied any requirements for a specific exchange of documentation with a Recipient, sends (directly or through a delegated agent) the digitally signed CDA document in a secure transaction to the Recipient using appropriate transmission methods.
The standard provides: a method of incorporating digital signatures and delegation of right assertions into the header of a CDA Document for Attachments in the sdtc:signatureText element. a digital signature standard for a CDA Document for Attachments that supports the exchange of a signed: digest of the message timestamp role of the signer purpose of signature a digital signature standard for: the public certificate of the signer long term validation data, including Online Certificate Status Protocol (OCSP) response and/or Certificate Revocation List (CRL) a standard to assert a delegation of rights that supports the exchange of: the certificate ID of both parties the purpose of the delegation the effective date of the assertion a method to validate an existing delegation of rights assertion The ability to provide Digital Signatures and Delegation of Rights Assertion artifacts can be achieved with existing standards. The capability may be provided as a service by third parties or incorporated directly into or provided in conjunction with EHRs and payer systems. E.1 User Story– Digital Signature by Authorized Signer The Authorized Signer digitally signs the document establishing the signer’s role and purpose of signature. The Authorized Signer sends the signed document to the Recipient. The Recipient receives the Signed Document and authenticates the Authorized Signer’s digital certificate, the signature artifact, and validates the data integrity of the document. In order to participate in digital signing, the Authorized Signer obtains and maintains an X.509v3 digital signing certificate. Entities approved by a Registration Authority will receive the X.509v3 certificate from a Certificate Authority to incorporate into their business process. The Authorized Signer creates a Digital Signature artifact incorporating role, purpose of signature, and date/time of the signature and inserts it into the sdtc:signatureText element. The Authorized Signer, who has satisfied any requirements for a specific exchange of documentation with a Recipient, sends (directly or through a delegated agent) the digitally signed CDA document in a secure transaction to the Recipient using appropriate transmission methods.