Sharing Valuesets, Codes, and Maps (SVCM)
1.5.1 - Trial-Implementation International flag

This page is part of the Sharing Valuesets, Codes, and Maps (SVCM) (v1.5.1: Publication) based on FHIR R4. This is the current published version. For a full list of available versions, see the Directory of published versions

Resource Profile: Basic AuditEvent for a successful Operation

Official URL: https://profiles.ihe.net/ITI/SVCM/StructureDefinition/IHE.SVCM.Audit.Operation Version: 1.5.1
Active as of 2023-08-02 Computable Name: OperationEvent

A basic AuditEvent profile for when a RESTful Operation action happens successfully.

  • Given a RESTful Operation is requested
  • And the request is authorized
  • When successful
    • Note a failure AuditEvent may follow this pattern, but would not be a successful outcome and should have an OperationOutcome
    • Note success may result in zero or more results. The number of results and the content of the results are not recorded.
  • Then the AuditEvent recorded will conform
    • The raw operation parameters is placed in the .contained element. The contained parameters enables preserving exactly what was requested, including possibly malicious patterns. This enables detection of malicious or malformed requests.

Note: the pattern defined in DICOM and IHE have the client is identified as the Source Role ID, and the server is identified as the Destination Role ID. This represents the query parameters are flowing from the client to the server. This may not be so obvious, as the data actually flows the opposite direction. This pattern is established and thus followed here.

Usage:

Formal Views of Profile Content

Description of Profiles, Differentials, Snapshots and how the different presentations work.

This structure is derived from AuditEvent

NameFlagsCard.TypeDescription & Constraintsdoco
.. AuditEvent 0..*AuditEventEvent record kept for security purposes
... type 1..1CodingType/identifier of event
Required Pattern: At least the following
.... system1..1uriIdentity of the terminology system
Fixed Value: http://terminology.hl7.org/CodeSystem/audit-event-type
.... code1..1codeSymbol in syntax defined by the system
Fixed Value: rest
.... display1..1stringRepresentation defined by the system
Fixed Value: Restful Operation
... Slices for subtype 1..*CodingMore specific type/id for the event
Slice: Unordered, Open by value:$this
.... subtype:operation 1..1CodingMore specific type/id for the event
Required Pattern: At least the following
..... system1..1uriIdentity of the terminology system
Fixed Value: http://hl7.org/fhir/restful-interaction
..... code1..1codeSymbol in syntax defined by the system
Fixed Value: operation
..... display1..1stringRepresentation defined by the system
Fixed Value: operation
... action 0..1codeType of action performed during the event
Required Pattern: E
... outcome 0..1codeWhether the event succeeded or failed
Required Pattern: 0
... Slices for agent 2..*BackboneElementActor involved in the event
Slice: Unordered, Open by pattern:type
.... agent:client 1..1BackboneElementActor involved in the event
..... type 1..1CodeableConceptHow agent participated
Required Pattern: At least the following
...... coding1..*CodingCode defined by a terminology system
Fixed Value: (complex)
....... system1..1uriIdentity of the terminology system
Fixed Value: http://dicom.nema.org/resources/ontology/DCM
....... code1..1codeSymbol in syntax defined by the system
Fixed Value: 110153
....... display1..1stringRepresentation defined by the system
Fixed Value: Source Role ID
..... who 1..1Reference(PractitionerRole | Practitioner | Organization | Device | Patient | RelatedPerson)Identifier of who
..... media 0..0
..... network 1..1BackboneElementLogical network location for application activity
.... agent:server 1..1BackboneElementActor involved in the event
..... type 1..1CodeableConceptHow agent participated
Required Pattern: At least the following
...... coding1..*CodingCode defined by a terminology system
Fixed Value: (complex)
....... system1..1uriIdentity of the terminology system
Fixed Value: http://dicom.nema.org/resources/ontology/DCM
....... code1..1codeSymbol in syntax defined by the system
Fixed Value: 110152
....... display1..1stringRepresentation defined by the system
Fixed Value: Destination Role ID
..... who 1..1Reference(PractitionerRole | Practitioner | Organization | Device | Patient | RelatedPerson)Identifier of who
..... media 0..0
..... network 1..1BackboneElementLogical network location for application activity
.... agent:user 0..1BackboneElementActor involved in the event
..... type 1..1CodeableConceptHow agent participated
Required Pattern: At least the following
...... coding1..*CodingCode defined by a terminology system
Fixed Value: (complex)
....... system1..1uriIdentity of the terminology system
Fixed Value: http://terminology.hl7.org/CodeSystem/v3-ParticipationType
....... code1..1codeSymbol in syntax defined by the system
Fixed Value: IRCP
....... display1..1stringRepresentation defined by the system
Fixed Value: information recipient
..... role S0..*CodeableConceptAgent role in the event
..... who 1..1Reference(PractitionerRole | Practitioner | Organization | Device | Patient | RelatedPerson)Identifier of who
..... name S0..1stringHuman friendly name for the agent
..... requestor 1..1booleanWhether user is initiator
Required Pattern: true
..... media 0..0
..... network 0..0
..... purposeOfUse S0..*CodeableConceptReason given for this user
... source S1..1BackboneElementAudit Event Reporter
... Slices for entity 1..*BackboneElementData or objects used
Slice: Unordered, Open by pattern:type
.... entity:transaction 0..1BackboneElementData or objects used
..... what
...... identifier
....... value 1..1stringthe value of X-Request-Id
..... type 1..1CodingType of entity involved
Required Pattern: At least the following
...... system1..1uriIdentity of the terminology system
Fixed Value: https://profiles.ihe.net/ITI/BALP/CodeSystem/BasicAuditEntityType
...... code1..1codeSymbol in syntax defined by the system
Fixed Value: XrequestId
.... entity:parameters 1..1BackboneElementData or objects used
..... what 1..1Reference(Parameters)Specific instance of resource
..... type 1..1CodingType of entity involved
Required Pattern: At least the following
...... system1..1uriIdentity of the terminology system
Fixed Value: http://terminology.hl7.org/CodeSystem/audit-entity-type
...... code1..1codeSymbol in syntax defined by the system
Fixed Value: 2
...... display1..1stringRepresentation defined by the system
Fixed Value: System Object
..... role 0..1CodingWhat role the entity played
Required Pattern: At least the following
...... system1..1uriIdentity of the terminology system
Fixed Value: http://terminology.hl7.org/CodeSystem/object-role
...... code1..1codeSymbol in syntax defined by the system
Fixed Value: 4
...... display1..1stringRepresentation defined by the system
Fixed Value: Domain Resource
..... lifecycle 0..0
..... securityLabel 0..*Codingmay contain the security labels on the Bundle search set returned
..... query 0..0
..... detail 0..0

doco Documentation for this format

 

Other representations of profile: CSV, Excel, Schematron