Introduction This document describes a framework that provides access control interoperability useful in the healthcare environment. Interoperability is achieved SAML assertions that carry common semantics and vocabularies in exchanges specified below. Terminology The key words NOT”, NOT”, “MUST”, “MUST “REQUIRED”, “SHALL”, “SHALL “SHOULD”, NOT”, and in this document are to be “SHOULD “RECOMMENDED”, “MAY”, “OPTIONAL” interpreted as described in [RFC2119]. The following definitions establish additional terminology and usage in this profile: Access Control Service (ACS) enterprise security service . Permission Structural Role job function within the context of organization. Service Provider (SP) system provid protected resource Service . Normative References [RFC2119] Bradner, S., words for use in RFCs to Indicate Requirement Levels”, “Key BCP 14, RFC 2119, March 1997. http://www.ietf.org/rfc/rfc2119.txt. [SAMLPROF] for the Security Assertion Markup Language, v2.0,” March “Profiles 2005, OASIS Standard, [ASTM E1986-98] Standard Guide for Information Access Privileges to Health Information. [ASTM E2595] Standard Guide for Privilege Management Infrastructure [SAML] Assertion Markup Language (SAML) v2.0”, Standard, 15 “Security March 2005, [HL7-PERM] HL7 Security Technical Committee, HL7 Version 3 Standard: Access Control Healthcare Permission Catalog, Release 1, .
Introduction This document describes a framework that provides access control interoperability useful in the healthcare environment. Interoperability is achieved SAML assertions that carry common semantics and vocabularies in exchanges specified below. Terminology The key words “MUST”, “MUST NOT”, “REQUIRED”, “SHALL”, “SHALL NOT”, “SHOULD”, “SHOULD NOT”, “RECOMMENDED”, “MAY”, and “OPTIONAL” in this document are to be interpreted as described in [RFC2119]. The following definitions establish additional terminology and usage in this profile: Access Control Service (ACS) enterprise security service . Permission Structural Role job function within the context of organization. Service Provider (SP) system provid protected resource Service . Normative References [RFC2119] Bradner, S., “Key words for use in RFCs to Indicate Requirement Levels”, BCP 14, RFC 2119, March 1997. http://www.ietf.org/rfc/rfc2119.txt. [SAMLPROF] “Profiles for the Security Assertion Markup Language, v2.0,” March 2005, OASIS Standard, [ASTM E1986-98] Standard Guide for Information Access Privileges to Health Information. [ASTM E2595] Standard Guide for Privilege Management Infrastructure [SAML] “Security Assertion Markup Language (SAML) v2.0”, Standard, 15 March 2005, [HL7-PERM] HL7 Security Technical Committee, HL7 Version 3 Standard: Access Control Healthcare Permission Catalog, Release 1, .
saml-xspa-v2.0-wd04.docx