Basic Audit Log Patterns (BALP)
1.1.3 - Trial-Implementation International flag

This page is part of the IHE Basic Audit Log Patterns (BALP) (v1.1.3: Publication) based on FHIR (HL7® FHIR® Standard) R4. This is the current published version. For a full list of available versions, see the Directory of published versions

Example AuditEvent: Audit Example of a basic Authorization Deny access

Generated Narrative: AuditEvent

Resource AuditEvent "ex-auditAuthZconsent-deny"

Profile: Basic AuditEvent pattern for when an Authorization permit is decided

Security Labels: http://terminology.hl7.org/CodeSystem/v3-ActReason

type: Security Alert (Details: DICOM code 110113 = 'Security Alert', stated as 'Security Alert')

subtype: Authorization Decision using Roles and Consent (Details: https://profiles.ihe.net/ITI/BALP/CodeSystem/AuthZsubType code AuthZ-Consent = 'Authorization Decision using Roles and Consent', stated as 'null')

action: E

recorded: Dec 27, 2021, 3:49:00 AM

outcome: 8

outcomeDesc: Consent denied access to this user

agent

type: Application (DICOM#110150)

who: Device/ex-device

requestor: false

Networks

-AddressType
*2001:0db8:85a3:0000:0000:8a2e:0370:73342

agent

type: information recipient (ParticipationType#IRCP)

who: Practitioner/ex-practitioner

requestor: true

purposeOfUse: patient requested (ActReason#PATRQT)

agent

type: healthcare provider (RoleClass#PROV)

who: Organization/ex-organization "nowhere"

requestor: false

agent

type: Authorization Server (Security Role Type#authserver)

who: Device/ex-authz

requestor: false

Sources

-SiteObserverType
*server.example.comDevice/ex-authzSecurity Server (Details: http://terminology.hl7.org/CodeSystem/security-source-type code 6 = 'Security Server', stated as 'Security Server')

entity

what: Patient/ex-patient " SCHMIDT"

type: Person (Details: http://terminology.hl7.org/CodeSystem/audit-entity-type code 1 = 'Person', stated as 'null')

role: Patient (Details: http://terminology.hl7.org/CodeSystem/object-role code 1 = 'Patient', stated as 'Patient')

entity

what: Consent/ex-consent

type: Consent (Details: http://hl7.org/fhir/resource-types code Consent = 'Consent', stated as 'null')