The Standard

In May 2024, the FAST Focus webinar, "Secure Health Data Exchange," brought together experts from across the healthcare industry to delve into the intricacies of the HL7 Unified Data Access Profiles (UDAP) Security for Scalable Registration, Authentication, and Authorization Implementation Guide, commonly referred to as the FAST Security IG. This session featured insights on key components and practical implementations of the FAST Security IG. 

Introduction to the FAST Security IG 

The session began with an explanation of the role of FAST in addressing healthcare interoperability challenges. The FAST Security IG aims to create a scalable, secure framework for health data exchange across national networks like TEFCA, Carequality, and CommonWell. 

The Journey to Trustworthy Information Exchange 

A historical perspective on the FAST Security IG highlighted its roots back to 2017. The goal was to leverage existing standards like public key infrastructure (PKI), OpenID Connect, and OAuth 2.0 to ensure a scalable, secure data exchange solution. The FAST Security IG integrates these standards into a cohesive framework, emphasizing the importance of trust in health data transactions. 

Key Components of the FAST Security IG 

The core elements of the FAST Security IG include: 

• JWT-Based Authentication and Authorization: Utilizing JSON Web Tokens for secure assertions of claims from trusted third parties.
• Dynamic Client Registration: Automating client registration using digital certificates to eliminate the need for shared secrets.
• Tiered OAuth: Facilitating patient-facing workflows by directing patients to trusted identity providers for authentication.

This approach ensures that both clients and servers can be securely identified and authenticated, streamlining the registration process, and enhancing trust across the network. 

Real-World Implementations and Insights 

The panel discussion featured firsthand experiences from implementers of the FAST Security IG. The discussion emphasized the collaborative effort in refining the FAST Security IG and the importance of ongoing participation in workgroups to further enhance the specification. 

Open-source solutions to facilitate implementation were highlighted, including a .NET reference implementation and a diagnostic tool called UDAP Ed. These resources help developers visualize and test their implementations, accelerating the adoption of the FAST Security IG. 

The importance of identity assurance was underscored, advocating for a centralized, trusted entity to manage high-security registrations. The FAST Security IG's reliance on well-established standards makes it a robust and scalable solution for the healthcare industry. 

March 2024 marked a pivotal moment for the healthcare IT sector, with the FHIR at Scale Taskforce (FAST) community survey revealing critical insights into the adoption, challenges, and perspectives surrounding various FAST implementation guides (IGs). This survey, engaging various stakeholders from providers to technology vendors, sheds light on the collective journey towards seamless healthcare interoperability. Let's dive into the nuanced feedback and the path it carves for the future of healthcare IT. 

Survey Results Overview 

FAST Security IG Adoption and the Quest for Clarity   

The uptake of the HL7 FAST UDAP Security for Scalable Registration, Authentication, and Authorization Implementation Guide (FAST Security IG) is on the rise, driven by an evident market need.  A notable proportion of respondents are keen to implement the HL7 FAST Security IG, likely due to its inclusion in the TEFCA FHIR Roadmap. There were some concerns expressed about market readiness. However, respondents expressed a need for clearer guidance beyond the existing FAST Security IG, suggesting the development of a companion document to aid in implementation strategies would be helpful. 

FAST Identity IG: Overcoming Adoption Barriers   

While there seems to be adoption readiness for the Interoperable Digital Identity and Patient Matching IG, the survey highlights perceived barriers to adoption. These barriers were related to industry issues such as cross-jurisdiction consent and broader market acceptance and adoption by other industry initiatives rather than any issues with the IG itself. 

Five new Steering Committee members will bring unique insights to an upcoming slate of HL7 FHIR use cases in oncology, cardiovascular health, and genomics.

CodeX, the HL7® Fast Healthcare Interoperability Resources (FHIR®) Accelerator™ working to advance the adoption of FHIR as the standard to obtain high-quality, computable data for patient care and research, including the domains of oncology, cardiovascular health, and genomics, announced an expanded steering committee and new members of its leadership team.

“These experts in their fields are committed to helping CodeX develop and implement a strategic vision for the future with integrity, fairness, and equity. We embrace the HL7 ethos of collaboration and community to collectively solve interoperability challenges,” said Su Chen, M.D., program manager and clinical director of CodeX & digital health clinical principal at MITRE. In her role, Chen serves as chair of the CodeX Steering Committee.

HL7 FHIR empowers patients to access health data with third-party apps in a growing number of countries. As nations, locales and regulators across the world look to increase their citizens’ access to health data through third-party apps, they naturally turn to FHIR. The International Patient Access (IPA) standard aims to enable regulators, empower patients, guide app developers, and promises greater consistency across countries for multinational apps and FHIR servers.

• For patients, greater access to health data empowers them to standardly and computably access and retain their digital health data.

• For regulators and national specification authors, the IPA specification provides a starting point to jumpstart a national health API ecosystem, with an emphasis on patient access. The IPA FHIR profiles are the result of an analysis of existing national base profiles, and is the lowest common denominator globally.

• For app developers, IPA outlines the global base set of access and security mechanisms and content format. This increases the size of the addressable market for apps, both in terms of geography and of systems.

• For systems vendors, IPA defines a base set of functionality, enabling less adaptation and custom work when the system is deployed to a new market. More apps and other systems are readily interoperable with the system.
  
• For healthcare systems, adoption of IPA means less expensive and more robust systems, as fewer market-specific customizations are required. Support of IPA will also enable healthcare systems access to a wide ecosystem of interoperable apps.

By Brian Douthit; Charles Jaffe, MD, PhD; Viet Nguyen, MD; and Titus Schleyer, DMD, PhD

Originally starting as an application showcase in 2018, the FHIR Apps Competition has become one of the most popular sessions at the AMIA Annual Symposium. From clinical decision support and health information exchange to problem-oriented displays and back-end data exchange, HL7 FHIR is enabling innovation across a whole range of health IT domains.

AMIA and HL7 recently reinvigorated their partnership to emphasize the importance of health data standards in informatics, and engage the AMIA implementer community in leveraging FHIR for research, patient care and education. The competition is intended to highlight the best and most innovative FHIR implementations – if you are planning to attend the Annual Symposium this year, you don’t want to miss it!

Two CodeX HL7 FHIR Accelerator use case teams are hosting monthly public calls to involve a broad community in early prototype development and pilot planning activities currently underway.

Da Vinci is creating the foundation to solve large scale industry problems.

The HL7 January FHIR Connectathon  was a success, with all examples from the implementation guides (IGs) tested, including over 20 test cases.

The HL7 Da Vinci Project, through its efforts that include Connectathons, “continues to focus on solving real-world data exchange challenges between payers and providers,” said Vanessa Candelora, Da Vinci’s project manager and senior consultant with Point-of-Care Partners, at the Jan. 26 Da Vinci Community Roundtable. “Da Vinci is creating the foundation to solve large scale industry problems, including, risk and quality data sharing and workflow; unlocking data or freeing data needed for patient costs; and reducing provider burden.”

Candelora called HL7 Connectathons, “a fundamentally human-powered endeavor,” praising Da Vinci as “a really great community,” with a multi-stakeholder membership that includes providers, payers, vendors, industry partners and EHRs. “We continue to grow and learn from each other in this party of the willing.”

Candelora added that founders of Da Vinci are pleased with the amount of work the group has accomplished in such a short time. “They really couldn't have envisioned the impact and the progress that this project has made,” she said.