ISO/TS 13606-4:2009

Foreword
0 Introduction
  0.1 Challenge addressed by this part of ISO 13606
  0.2 Communication scenarios
  0.3 Requirements and technical approach
  0.4 Generic EHR access policy model
  0.5 Audit log interoperability
  0.6 Relationship to ENV 13606-3
1 Scope
2 Conformance
3 Terms and definitions
4 Abbreviations
5 Record component sensitivity and functional roles
  5.1 RECORD_COMPONENT sensitivity
  5.2 Functional roles
  5.3 Mapping of functional role to RECORD_COMPONENT sensitivity
6 Representing access policy information within an EHR_EXTRACT
  6.1 General
  6.2 Archetype of the Access policy COMPOSITION
  6.3 ADL representation of the archetype of the access
      policy COMPOSITION
  6.4 UML representation of the archetype of the access
      policy COMPOSITION
7 Representation of audit log information -
  EHR_AUDIT_LOG_EXTRACT model
Annex A (informative) - Illustrative access control example
Annex B (informative) - Relationship of this part of ISO 13606
                        to ENV 13606-3:2000
Bibliography

ISO/TS 13606-4:2009 describes a methodology for specifying the privileges necessary to access EHR data. This methodology forms part of the overall EHR communications architecture defined in ISO 13606‑1.

ISO/TS 13606-4:2009 seeks to address those requirements uniquely pertaining to EHR communications and to represent and communicate EHR-specific information that will inform an access decision. It also refers to general security requirements that apply to EHR communications and points at technical solutions and standards that specify details on services meeting these security needs.