Security and Trust Workgroup
Attendance Tracker for Workgroup meetings
In order to streamline attendance tracking for each workgroup, there is a new form at the bottom of each workgroup page that participants should use to "sign in" at the start of each workgroup call. If you are not at a computer during the call, the workgroup lead will ask that you state your name and organization at the start of the call to be sure your attendance is recorded. Click here to access the form for the Security & Trust workgroup ONLY. For other workgroups' attendance forms, see the link on the respective landing pages.
Purpose and Goals
Purpose: To provide alternatives and highlight issues relating to security and trust enablement via technology (e.g., certificates and signatures)
Our Goals: The goal of the Security and Trust Workgroup is to:
- Enable trust at scale, but allow for individual reciprocal trust decisions
- Define key roles for certificates and signatures. For example
- TLS/encryption over the wire
- Assertions of trust and policy
- Non-repudiation
- Verification that content not altered in transit
- Define approaches and pros/cons to certificate-based signatures assuming
- SOAP, XDR
- REST + multipart MIME
- SOAP + multipart MIME
- Highlight other technical issues
- Highlight key policy considerations
Consensus Approved Deliverables
- Threat Models (SMTP) (WG Consensus Achieved)
- **XDR Threat Models** - (WG Consensus Achieved)
- Direct Project Security Overview (WG Consensus Achieved)
- Certificate Pilot Recommendations Discussion (WG Consensus Achieved)
Schedule
This workgroup has completed its work and no longer meets on a regular basis.
Members
Lead: Umesh Madan
| Brett Peterson |
ABILITY (formerly VisionShare) |
| Sam Christie |
Allscripts |
| Nick Radov |
Axolotl |
| Laurie Tull |
CareSpark/Anakam (HIE Tech) |
| Greg Turner |
Carespark/CGI Federal |
| Fred Trotter |
Cautious Patient |
| David McCallie |
Cerner |
| Jonathan Gershater |
Clinical Groupware Collaborative |
| Richard Floyd |
CSC |
| Justin Stauffer |
Epic |
| Vassil Peytchev |
Epic |
| John Moehrke |
GE |
| Susan Johnston |
GSI Health |
| Joel Ryba |
Healthcare Information Xchange of NY |
| Tim Andrews |
High Pine Associates |
| Mike Berry |
HLN Consulting |
| David Houlding |
Intel |
| Vince Lewis |
MedAllies |
| Eric Heflin |
Medicity |
| David Juntgen |
Medical Informatics Engineering, Inc. |
| Sean Nolan |
Microsoft |
| Umesh Madan |
Microsoft |
| Erik Horstkotte |
Mirth Corporation |
| Konda Mullapudi |
Misys Open Source Solutions |
| George Komatsoulis |
NIH NCI |
| Dan Russler, M.D. |
Oracle Health Sciences Global Strategies |
| Brian Adams |
RelayHealth |
| Charles Curran |
RelayHealth |
| Piyush Shah |
RelayHealth |
| Ron Cordell |
RelayHealth |
| Don Bechtel |
Siemens |
| Jack Ousey |
Siemens |
| Martin Prahl |
Social Security Administration |
| Pam Waters |
Social Security Administration |
| Thomas Davidson |
Social Security Administration |
| Mark Gingrich |
SureScripts |
| Pete Palmer |
SureScripts |
| Gail Belles |
VA |
| Jared Doherty |
VA |
| Mike Davis |
VA |
Meeting Notes:
Security and Trust Meeting 2010-04-01
Security and Trust Meeting 2010-04-08
Security & Trust Meeting 2010-04-15
Security & Trust Meeting 2010-04-22
Security & Trust Meeting 2010-04-29
Security & Trust Meeting 2010-05-13
Security & Trust Meeting 2010-05-20
Security & Trust Meeting 2010-05-21
Security & Trust Meeting 2010-05-24
Security & Trust Meeting 2010-05-27
Security & Trust Meeting 2010-06-03
Security & Trust Meeting 2010-06-24
Security & Trust Meeting 2010-07-08
Security & Trust Meeting 2010-07-15
Security & Trust Meeting 2010-07-22
Security & Trust Meeting 2010-08-12
Security & Trust Meeting 2010-08-19
Security & Trust Meeting 2010-08-26
Security & Trust Meeting 2010-09-02
Security & Trust Meeting 2010-09-09
Security & Trust Meeting 2010-10-14
Security & Trust Meeting 2010-10-21
Security & Trust Meeting 2010-11-04
Security & Trust Meeting 2011-01-06
Security & Trust Meeting 2011-01-13
Security & Trust Meeting 2011-01-20
Security & Trust Meeting 2011-01-27
Google Group (for mailing purposes only):
Direct Security and Trust WG Google Group
What We're Part Of: