January 2017 - DG-BSC - mailman.kantarainitiative.org

Notes from BSC telecon Tuesday, January 10
by Eve Maler 10 Jan '17

10 Jan '17

http://kantarainitiative.org/confluence/display/BSC/2017-01+%28January+2017… Agenda: - Report <https://docs.google.com/document/d/1HOVJ3lKqOIjwCqPt5jFxfLr7wEoJ0ZVNbMGsdsW…> work Attending: Eve, Adrian, Matisse, Thomas, Susan, JohnW Eve gave an update on the efforts to move to the new report doc. Devon is helping Thomas and Eve with some key overall editing tasks. Adrian described the value proposition of Verifiable Claims: It "kills the need for federation" because, in a triple-blind manner, the RP can verify a claim directly from the issuer. Thomas's and Eve's analysis didn't find this to be true in any special way; the technology looks extremely similar to JWTs, for example, and the notion of an RP is a federation notion and requires trust to be established somehow. Adrian will review, discuss with Manu (the draft spec author), and get back to the group. Thomas has filled out the OPAL/Enigma section; no analysis section yet. What's the best way to drive to consensus on the analysis of each section? Thomas, Eve, and Devon will continue editing, and will draw the DG's attention to new sections for timely review. Scheduled meetings will focus on analysis and review. *Eve Maler*ForgeRock Office of the CTO | VP Innovation & Emerging Technology Cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 0

Timely perspective on our eRx Use Case
by Adrian Gropper 05 Jan '17

05 Jan '17

http://www.healthitoutcomes.com/doc/the-e-prescribing-evolution-today-s-ben… Note that the author ignores the patient perspective, and imagines there will be a source for the decision support information that combines genomic and financial data with the health record. -- Adrian

1 0

Notes from BSC telecon Tuesday, January 3
by Eve Maler 04 Jan '17

04 Jan '17

http://kantarainitiative.org/confluence/display/BSC/2017-01+%28January+2017… Agenda: - Report <https://docs.google.com/document/d/1HOVJ3lKqOIjwCqPt5jFxfLr7wEoJ0ZVNbMGsdsW…> work Attending: Eve, Thomas, Kathleen, Matisse, Thorsten, Adrian, Susan, Devon (finishing law school, studying data privacy), SteveO, JohnW Our DG's life is extended just for this next month. Kathleen points to the 21st Century Cures Act (house bill link <http://docs.house.gov/billsthisweek/20161128/CPRT-114-HPRT-RU00-SAHR34.pdf>). It calls for a trust framework. Adrian notes that it mentions longitudinal health records, which is a novel challenge in the patient context vs. clinical research (subjects). See his blog post <http://thehealthcareblog.com/blog/2016/12/16/making-the-physician-patient-r…> . To pick a fintech use case, can we find one with an individual perspective vs. an institutional perspective? Can we pick one from Sedona <https://thesedonaconference.org/> that has the right characteristics? Susan notes that Everledger is working to ensure that the ethical diamond use case is protecting workers etc., not just tracking the diamonds. What about BanQu <http://www.banquapp.com/> ("Dignity Through Identity") as a financial use case for empowerment? Susan has talked to the principal. *AI:* Eve to send the questionnaire to Susan for sharing with the BanQu person and to Adrian for sharing with the Consensys people. *AI:* Thomas: Fill out the questionnaire for Enigma/Opal. *AI:* Adrian: Fill out the questionnaire for his use case (and/or write the full use case! ). *AI:* Eve: Flesh out report outline (hopefully together with Thomas), completing AIs in report comments, before our Thursday meeting. *Eve Maler*ForgeRock Office of the CTO | VP Innovation & Emerging Technology Cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

2 4

Sedona EHR Use Case fails in terms of how individuals interact more equitably and efficiently
by Adrian Gropper 03 Jan '17

03 Jan '17

https://s3.amazonaws.com/IGG/EHR.pdf When the individuals involved are a licensed professional and a patient, the Logical Model (p62) makes almost no sense at all. The EHR could be compiled from source and patient owned as long as: (1) the licensed professional's claims can be verified by the patient against their issuers (2) the licensed professional can put a digital signature on a detailed log entry created by the EHR (3) the timestamped hash of the log entry can be put on a distributed public ledger (4) the licensed professional may keep a copy of their log entry and the timestamp proof in case of dispute where the patient "loses" their copy. An effective individual-centric solution depends on substitutability and therefore standards. There are standards being worked on for many of these steps: (1) W3C Verifiable Claims https://www.w3.org/2017/vc/charter (2) Rebooting Web of Trust Decentralized Identifier (DID <https://github.com/WebOfTrustInfo/rebooting-the-web-of-trust-fall2016/blob/…>) is being implemented by 4 separate groups (3) Chainpoint http://www.chainpoint.org/ and Open Timestamps <https://petertodd.org/2016/opentimestamps-announcement> are being combined in Rebooting Web of Trust (4) is just a personal data store like Dropbox The HIE of One Use Case and reference implementation http://hieofone.org/ is in the process of implementing this whole stack. (a) The patient-controlled EHR is done. (b) The patient-controlled controller of the EHR and other resources is a personal UMA AS and is done. (c) The physician's DID and secure signature are initially demonstrated using uPort <https://www.youtube.com/watch?v=FNlAkGauIdw&list=PLn9P7BiqUmmjk09q4I57cvPwy…> and being upgraded and integrated. (d) Verifiable Claims is not yet implemented. The Use Case paper <https://www.healthit.gov/sites/default/files/7-29-poweringthephysician-pati…> won an ONC Blockchain Health prize. (e) Timestamps of the physician's interaction with the EHR are not yet implemented. I believe this shows a licensed individual writing a prescription or curating a patient-centered longitudinal health record in the absence of any particular federation or trust framework. Adrian -- Adrian Gropper MD

1 0

Reminder: BSC telecon series starts up again tomorrow (Tuesday)
by Eve Maler 02 Jan '17

02 Jan '17

Happy 2017, all! Our focus is completing the report, so please consider these to be working sessions, with Thomas and me wielding the main pen. Especially if you have a writing assignment, please come prepared and try to review the link and last set of notes I sent out. Eve (from my iPad)

1 0

Book Review
by John Wunderlich 02 Jan '17

02 Jan '17

For your holiday reading pleasure. This might be of interest to the Legal UMA group and some on the BSC DG. It's a review <http://www.rogerwhitson.net/?p=3501>of Benjamin Bratton’s The Stack: On Software and Sovereignty <https://www.amazon.ca/Stack-Software-Sovereignty-Studies-ebook/dp/B01D1Q44HE> John Wunderlich, BA, MBA IAPP Fellow of Information Privacy CISA, CIPM, CIPP/C, PbD Ambassador @PrivacyCDN <https://twitter.com/PrivacyCDN> & Privacist -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

2 1