Basic Audit Log Patterns (BALP)
1.1.4 - Trial-Implementation International flag

This page is part of the IHE Basic Audit Log Patterns (BALP) (v1.1.4: Publication) based on FHIR (HL7® FHIR® Standard) R4. This is the current published version. For a full list of available versions, see the Directory of published versions

Example AuditEvent: Audit Example of a basic Authorization Deny access

Profile: Basic AuditEvent pattern for when an Authorization permit is decided

Security Label: test health data (Details: ActReason code HTEST = 'test health data')

type: DICOM: 110113 (Security Alert)

subtype: Authorization subType events: AuthZ-Consent (Authorization Decision using Roles and Consent)

action: Execute

recorded: 2021-12-27 09:49:00+0000

outcome: Serious failure

outcomeDesc: Consent denied access to this user

agent

type: Application

who: Device

requestor: false

Networks

-AddressType
*2001:0db8:85a3:0000:0000:8a2e:0370:7334IP Address

agent

type: information recipient

who: Practitioner: telecom = JohnMoehrke@gmail.com

requestor: true

purposeOfUse: patient requested

agent

type: healthcare provider

who: Organization nowhere

requestor: false

agent

type: Authorization Server

who: Device

requestor: false

Sources

-SiteObserverType
*server.example.comDeviceAudit Event Source Type: 6 (Security Server)

entity

what: John Schmidt Other, DoB: 1923-07-25

type: Audit event entity type: 1 (Person)

role: AuditEventEntityRole: 1 (Patient)

entity

what: Consent: status = active; scope = Privacy Consent; category = Privacy policy acknowledgment Document

type: ResourceType: Consent (Consent)