Minutes of June 25, 2010 XSPA Conference Call

Minutes of XSPA Conference Call

Friday, June 25, 2010, 1:00pm ET

Dial in info: +1 800 767 1750

Access code 97728 [i.e. XSPA T(C)]

 

1. Roll Call & Agenda Review

Voting Members:

  John Moehrke, GE
Healthcare

  Anil Saldhana, Red
Hat

  David Staggs,
Veterans Health Administration

 

Members:

  Michael Dufel, Jericho
Systems Corporation

 

Guests:

  Ed Coyne, Veterans
Health Administration

 

Quorum reached (3/5)

 

2. Minutes of May 28, 2010 were approved.

 

3.
General announcements were made concerning the Identity Management 2010
Conference (27-28 September 2010) and “Structure” cloud computing
conference.

 

4. Comments
made on the Profile of WS-Trust during the 90 day public comment period were
reviewed. Official end of public comment: 26 June 2010. Duane will respond to
Dr. Chadwick’s comment on the figure.

 

5. David
provided a presentation was made to the HIT-SC (Health Information
Technology-Standards Committee), a FACA (Federal Advisory Committee Act)
committee on advanced security and privacy which included reference to the XSPA
standards and the reference implementation used at the RSA 2010
demonstration.  

 

6. Duane
DeCouteau will be demonstrating the reference implementation of the OASIS XSPA
standards at the U.S. HIT Policy Committee (HITPC) Privacy and Security Tiger
Team’s hearing on consumer choice technology June 29, 2010 at 2:15
PM.  

 

7. The
TC reviewed the Ontology Decision Point (ODP) XACML TC use cases posted to the
list.  TC gave provisional OK to
share with XACML TC but there was some concern this might be too early.  John pointed out role ontology does not
always match rights inheritance and that different domains might have differing
results.  For example Western
medical doctor v. Chinese medical doctor might require differing rights and
hierarchy therefore a bad model for rights assignment.

 

Some
of the use cases from the list were considered better handled by attributes. Mike
Dufel suggested the “care
team” example could be better represented without an ontology.

 

9. General discussion

 

10. No active
action items.

 

Regards,

David

David Staggs, JD, CISSP
(SAIC)

Veterans Health Administration

Chief Health Informatics Office

Standards and Interoperability

Office: 858 433 1473