FHIR R4 AuditEvent API

Overview

This asset is a component of MuleSoft Accelerator for Healthcare.

MuleSoft Accelerator for Healthcare enables healthcare providers to unlock critical patient data to build a patient 360 within Salesforce Health Cloud, faster and easier than ever before. The solution includes pre-built APIs, connectors, integration templates, and prescriptive end-to-end reference architecture to bring patient demographics information and COVID-19 test results from any EHR into Health Cloud using HL7 V2 or FHIR standards.

The solution also provides a library of United States Core Data for Interoperability (USCDI) and FHIR R4 resources to help healthcare developers adhere to interoperability needs and jumpstart the development of healthcare digital transformation initiatives.

Use case covered

The audit event is based on the IHE-ATNA Audit record definitions, originally from RFC 3881, and now managed by DICOM (see DICOM Part 15 Annex A5 ).

• ASTM E2147 – Setup the concept of security audit logs for healthcare including an accounting of disclosures
• IETF RFC 3881 – Defined the Information Model (IETF rule forced this to be informative)
• DICOM Audit Log Message – Made the information model Normative, defined Vocabulary, Transport Binding, and Schema
• IHE ATNA – Defines the grouping with secure transport and access controls, and defined specific audit log records for specific IHE transactions.
• NIST SP800-92 – Shows how to do audit log management and reporting – consistent with our model
• HL7 PASS – Defined an Audit Service with responsibilities and a query interface for reporting use
• ISO 27789 – Defined the subset of audit events that an EHR would need
• ISO/HL7 10781 EHR System Functional Model Release 2
• ISO 21089 Trusted End-to-End Information Flows

This resource is managed collaboratively between HL7, DICOM, and IHE.

The primary purpose of this resource is the maintenance of security audit log information. However, it can also be used for any audit logging needs and simple event-based notification.

This API uses FHIR R4 AuditEvent Library.

More information about FHIR R4 AuditEvent specification can be found here.