Basic Audit Log Patterns (BALP)
1.1.3 - Trial-Implementation International flag

This page is part of the IHE Basic Audit Log Patterns (BALP) (v1.1.3: Publication) based on FHIR (HL7® FHIR® Standard) R4. This is the current published version. For a full list of available versions, see the Directory of published versions

Example AuditEvent: Audit Example of a basic SAML access token of comprehensive

Generated Narrative: AuditEvent

Resource AuditEvent "ex-auditPoke-SAML-Comp"

Profile: Basic AuditEvent pattern for when an activity was authorized by an SAML access token Comprehensive

Security Labels: http://terminology.hl7.org/CodeSystem/v3-ActReason

type: Application Activity (Details: DICOM code 110100 = 'Application Activity', stated as 'Application Activity')

subtype: Boredom poke (Details: urn:ietf:rfc:1438 code poke = 'poke', stated as 'Boredom poke')

action: R

recorded: Dec 3, 2021, 3:49:00 AM

outcome: 0

agent

AuditEvent.agent Assurance Level: high authentication process level of assurance (ObservationValue#LOAAP4)

AuditEvent.agent other identifiers: SAML subject-id/JohnDoe

AuditEvent.agent other identifiers: National provider identifier/1234567@myNPIregistry.example.org

AuditEvent.agent other identifiers: Provider number/JohnD

type: information recipient (The code used to identifiy a User Agent#UserSamlAgent; ParticipationType#IRCP)

who: https://sts.sykehuspartner.no/05086900124

requestor: true

policy: XC4WdYS0W5bjsMGc5Ue6tClD_5U

purposeOfUse: patient requested (ActReason#PATRQT)

agent

type: healthcare provider (RoleClass#PROV)

who: : St. Mary of Examples

requestor: false

agent

type: homeCommunityId (unknown#homeCommunityId)

who: homeCommunityId/urn:uuid:cadbf8d0-5493-11ec-bf63-0242ac130002

requestor: false

Sources

-SiteObserverType
*server.example.comDevice/ex-deviceApplication Server (Details: http://terminology.hl7.org/CodeSystem/security-source-type code 4 = 'Application Server', stated as 'Application Server')

entity

what: urn:uuid:a4b1d27e-5493-11ec-bf63-0242ac130002

type: Consent (Details: http://hl7.org/fhir/resource-types code Consent = 'Consent', stated as 'Consent')

detail

type: urn:ihe:iti:xua:2012:acp

value: urn:uuid:b8aa8eec-5493-11ec-bf63-0242ac130002

detail

type: urn:oasis:names:tc:xacml:2.0:resource:resource-id

value: urn:uuid:d7391e5a-5493-11ec-bf63-0242ac130002