Consent Management via Patient Portal: FHIR-Based Access Control
Patient Portal | AJ FHIR Platform
Summary
The system provides a portal allowing patients to directly manage their consent records for medical data. Using OAuth2 authentication, patients can decide which applications receive access, what types of FHIR resources are shared, and for how long.
Details
This platform offers a centralized patient portal for managing consent records regarding personal health data. Authentication relies on the OAuth2 flow, utilizing SMART auth servers via Spring Security. The system resolves the patient ID from the OAuth2 principal. The portal allows patients to view active consents (Dashboard) and grant new access (Grant). When granting access, users select specific FHIR resource types (from a safe whitelist of 14 standard R4 types) and set an expiry date. A key feature is the ability to narrow the scope or shorten the expiry period of existing consent records (Edit), though server-side validation strictly prevents expanding the original scope or extending the duration. The History function provides a comprehensive audit trail, including all permit/deny decisions and full IHE ATNA tracking, ensuring high data governance transparency. Security is paramount: while the portal uses session-based authentication, the FHIR/REST APIs use stateless JWTs. Crucially, ownership enforcement mandates that every operation must validate the patient ID against the consent record owner, making unauthorized access or modification technically impossible. This implementation strongly embodies the concept of data sovereignty in healthcare IT.
Original content copyright by respective publishers