3..5.1.1 Specific Security Considerations The primary security risk facing the is the compromising of personal health data via theft of the device. This risk is, in practice, quite low since the rarely contains any personal information since the transport protocols of the Communicate PCHA Data transaction do not support the transmission of personal data to the Sensor Data Consumer. The Communicate PCHA Data transaction also do not currently support control and or configuration of the from the Sensor Data Consumer thus the threat of malicious configuration of the device is low. However there are current developments in the Communicate PCHA Data transaction for the configuration/control of the from the Sensor Data Consumer. That option will demand additional security considerations that have not yet been worked out. 3..5.1.2 Sensor Data Consumer Specific Security Considerations The greatest security risk facing the Sensor Data Consumer is the compromising of personal data via theft of the device. Unlike the , the Sensor Data Consumer is often a personal mobile device such as an Android phone or tablet and these devices may have all kinds of personal information; including financial. The Sensor Data Consumer implementation may also store the medical data for review. What the Sensor Data Consumer does with the received data beyond passing the data to the Device Observation Reporter or Content Creator is not specified by the Communicate PCHA Data transactions. Local storage of the data and whether or not it is encrypted is application dependent. 3. PCC- PCD Communicate PCD Data-hData Transaction 3..1 Scope These transactions are used to transfer collected patient measurement data to a Device Observation Consumer in the form of a PCD-01 message 3..2 Actor Roles Figure 3..2-1: Use Case Diagram Table 3..2-1: Actor Roles Device Observation Reporter Actor: Role: This actor is responsible for packaging patient measurement data into a PCD-01 message and sending it to a Device Observation Consumer Actor: Device Observation Consumer Role: This receives the PCD-01 message from one or more Device Observation Reporters
3..5.1.1 Specific Security Considerations The primary security risk facing the is the compromising of personal health data via theft of the device. This risk is, in practice, quite low since the rarely contains any personal information since the transport protocols of the Communicate PCHA Data transaction do not support the transmission of personal data to the Sensor Data Consumer. The Communicate PCHA Data transaction also do not currently support control and or configuration of the from the Sensor Data Consumer thus the threat of malicious configuration of the device is low. However there are current developments in the Communicate PCHA Data transaction for the configuration/control of the from the Sensor Data Consumer. That option will demand additional security considerations that have not yet been worked out. 3..5.1.2 Sensor Data Consumer Specific Security Considerations The greatest security risk facing the Sensor Data Consumer is the compromising of personal data via theft of the device. Unlike the , the Sensor Data Consumer is often a personal mobile device such as an Android phone or tablet and these devices may have all kinds of personal information; including financial. The Sensor Data Consumer implementation may also store the medical data for review. What the Sensor Data Consumer does with the received data beyond passing the data to the Device Observation Reporter or Content Creator is not specified by the Communicate PCHA Data transactions. Local storage of the data and whether or not it is encrypted is application dependent. 3. PCC- PCD Communicate PCD Data-hData Transaction 3..1 Scope These transactions are used to transfer collected patient measurement data to a Device Observation Consumer in the form of a PCD-01 message 3..2 Actor Roles Figure 3..2-1: Use Case Diagram Table 3..2-1: Actor Roles Actor: Device Observation Reporter Role: This actor is responsible for packaging patient measurement data into a PCD-01 message and sending it to a Device Observation Consumer Actor: Device Observation Consumer Role: This receives the PCD-01 message from one or more Device Observation Reporters
IHE_PCC_Suppl_RPM_2017-04-30.docx