HCX Tech+Domain Working Group - Biweekly meeting - 05-Oct-2023

[ajitsingh2603]

Agenda :

• Updates on the workstreams
• Product and Service valuset workstream updates
• V0.9 draft walkthrough
• Beneficiary Service Provider (BSP) reference app demo
• HCX protocol API security enhancements

PPT : https://docs.google.com/presentation/d/1vxslpVMUUcj_APBKOFBjbfqybLUX1kyfVLSA9_MUi3o/edit#slide=id.g20ecbd8e007_0_0

[ajitsingh2603]

Meeting Notes :

Product & Service Valueset Workstream Updates:

• Exercise of exploring different terminology sets against real anonymised claims data underway
• Detailed mapping performed for standard codes for 9 patient files. (https://docs.google.com/spreadsheets/d/12acBmhK5HU4mCmkKmHx9BDW2LXkTjh37/edit?rtpof=true&sd=true#gid=2015025494)
• Workstream exploring the strategy of proposing multiple recommended values sets for each categories with one preferred value set.
• Based on “Unification over standardisation” this approach is being explored to allow the ecosystem to simplify and initiate their standardisation journey with choice of valuesets.
• WIP - Approach for publishing, mapping, searching, maintaining and enhancing the value sets in a collaborative manner.
• Idea is to allow a quick start and multi step journey towards a unified terminology

V0.9 draft walkthrough :
Team provided an overview of the key changes and enhancements in the V0.9 draft. The draft is now published and open for feedback and comments. Link to V0.9 Draft - https://docs.hcxprotocol.io/v/v0.9-draft/

API security enhancements discussion :

Working group propose that instead of using a single client key and secret per participant to generate the API tokens, the protocol recommends using the username and password of each eligible user (based on roles assigned) for the participant in generating the API token.

Implementation :
In order to achieve this, while onboarding a new user to a participant, the HCX Gateway would be required to generate a secret for each user of a participant.

Link to the API enhancement document : https://docs.google.com/document/d/1O-8uxQobVQhK0QHRWSUsr4cffGJTTeSGBbMwHe-vwYc/edit#heading=h.egu6m9gsb9io