Query+Health+-+Query+Envelope+Consensus+Page

include component="page" wikiName="siframework" page="Query Health Header" The Query Health Query Envelope specification Call for Consensus is closed. You can review the votes at the Query Envelope Consensus P age.


 * **Full Name** || **Organization** || **Endorsement**
 * (Yes/ NO)** || **If No, what can be changed to make it Yes?** ||
 * Adele Allison || SuccessEHS, Inc. ||  ||   ||
 * Adrian Gropper || HealthURL ||  ||   ||
 * Ahmed Ghouri MD || Anvita Health Inc. ||  ||   ||
 * Alice Leiter || National Partnership for Women & Families ||  ||   ||
 * Amy Walker || HealthIT Plus, a business division of QSSI ||  ||   ||
 * Andy Gregorowicz || MITRE ||  ||   ||
 * Aneel Advani || Indian Health Service ||  ||   ||
 * Anil Kumar || CNSI ||  ||   ||
 * Anne Kling || MITRE ||  ||   ||
 * Anne Marie Priddy || Coastal Connect HIE ||  ||   ||
 * Anthony LaRocca || Apixio ||  ||   ||
 * Arien Malec || Relay Health ||  ||   ||
 * Arnon Rosenthal || MITRE ||  ||   ||
 * Barry Rhodes || CDC / DHQP ||  ||   ||
 * Bilal Alqudah || HACNet labs at SMU ||  ||   ||
 * Bob Rogers || Apixio ||  ||   ||
 * Brandon Weinberg || Individual ||  ||   ||
 * Brian Ahier || Gorge Health Connect, Inc. ||  ||   ||
 * CARL FARMIS || DISCOVERTURE HEALTH SOLUTIONS ||  ||   ||
 * Cassondra Fredriksen || FairWarning Inc ||  ||   ||
 * Chris Kim || Cal eConnect ||  ||   ||
 * Charlie Ishikawa || International Society for Disease Surveillance ||  ||   ||
 * charlotte weaver || Gentiva Health Services ||  ||   ||
 * Christopher Forrest, MD, PhD || Children's Hospital of Philadelphia ||  ||   ||
 * Christopher G Chute || Mayo Clinic ||  ||   ||
 * Corey Spears || McKesson ||  ||   ||
 * Cynthia Bero || Partners HealthCare ||  ||   ||
 * Dan Konson || CareEvolution, Inc. ||  ||   ||
 * David A. Stumpf, MD, PhD || OptumInsight ||  ||   ||
 * David Harlow || The Harlow Group LLC ||  ||   ||
 * David McCallie MD || Cerner ||  ||   ||
 * Deborah Leyva || Nuvon ||  ||   ||
 * Didi Davis || Serendipity Health, LLC ||  ||   ||
 * Doron Gutkind || LINTECH ||  ||   ||
 * Douglas A Gentile || Allscripts ||  ||   ||
 * Edward Glynn || Bon Secours Health System ||  ||   ||
 * Elizabeth Casey Halley || MITRE ||  ||   ||
 * Elvino Saldhana || Accenture ||  ||   ||
 * Eric Heflin || Medicity ||  ||   ||
 * Erin Fitzsimmons || Angel eCare || Yes ||  ||
 * Eugene Fievitz || SDI Health ||  ||   ||
 * Eva Powell || NPWF ||  ||   ||
 * Floyd Eisenberg || National Quality Forum ||  ||   ||
 * Frank Davison, CISA, CRISC || University of Tennessee Health Science Center ||  ||   ||
 * Fred Rahmanian || Siemens ||  ||   ||
 * George Cole || Allscripts ||  ||   ||
 * George Thomas || HHS ||  ||   ||
 * Georjean Parrish || All Healthcare Research & Resource Consulting ||  ||   ||
 * Gloria Nunez || OptumInsight ||  ||   ||
 * Gora Datta || CAL2CAL Corp ||  ||   ||
 * Greg Sharp MD || Ideal Family Healthcare ||  ||   ||
 * Ifti Qadir || Virginia Information Technologies Agency (VITA) ||  ||   ||
 * Imran Chaudri || Apixio ||  ||   ||
 * Ioana Singureanu || Eversolve ||  ||   ||
 * Itara Barnes || American College of Rheumatology ||  ||   ||
 * Jacob Reider, MD || Delmar Family Medicine ||  ||   ||
 * James St.Clair || HIMSS ||  ||   ||
 * Jay Srini || SCS ||  ||   ||
 * Jeffrey Brown || HPHCI\HMS ||  ||   ||
 * Jeffrey Klann PhD || Massachusetts General Hospital || NO || IDs - having coded ids (as text strings so URIs can be the code of choice) make sense. There are a few of these in the metadata. However, some metadata is only a free text name *that must be unique*. This is dangerous due to the potential for human error, language translation, etc. Strings should predominantly be for human or computer consumption, not both. I suggest making all necessary metadata elements into id strings for computer consumption. The specification should then require each implementation have a method of translating the ids into human-readable form (which could be accomplished by optional human-readable tags in the XML).

Extraneous elements - Why email at all? Why are the following not optional: purpose, notes, error message, and description?

Why are query and result payloads, for non-interoperable queries, restricted to characterstring?

If the result type contains text values from the given value set, the minimum length is 3. Why have length at all for enumerated types?

The transport requirements offers suggested technologies to meet a goal. This make sense. The authentication requirements mandate a technology (X.509). This is not consistent. || 1) Both the Query Purpose and PriorityType and Query Result Type attributes should include: 2) Query Result Type attributes should include: 3) Assuming that the Query Result metadata is protected/encrypted from unauthorized disclosure, the Result Type should include a mandatory Privacy Policy code (using HL7 v:ActPrivacyPolicy) to convey computable and interoperable policies governing the payload in addition to or in lieu of the Query Result Usage Policy Notes. 4) Please rename "Expected Result Sensitivity" and because the value set {Aggregated, Limited, De-identified, PHI} conveys the degree to which a collection of data is stripped of information which would allow the identification of the source of the data. For example, this attribute could be named "Expected Result Level of PHI Disclosure". || - ISO 8601 Date and Time formats. Both are non-free standards, suggest instead use of W3C XML Schema datatypes which define both value space and lexical representations. Generic Query Envelope Requirements For clarity suggest the following rewording: - The Query Envelope MUST contain either Query Request Information or Query Result Information. - The Query Envelope MAY carry multiple Query Request Information entities within a single Query Envelope. - The Query Envelope MAY carry multiple Query Result Information entities within a single Query Envelope. Query Identification Why constrain query identifiers to be integers ? This makes it difficult for multiple requestors to ensure their queries are uniquely identified and requires coordination across the network. Instead adopt Content-ID strategy used in MIME Information Requestor Identification Why is requestors name, organization and email address mandatory? The latter already contains the name and organization information. You can't create a valid one character email address so the length constraints on this field are invalid. Just reference RFC 5322 instead. Query Purpose 100 characters seems pretty low for this purpose. A 1 character lower bound seems pretty arbitrary, why not just make it optional ? Query Format Use media types instead of arbitrary character strings (e.g. 'application/hqmf+xml' instead of 'HQMF'). Media types already have a global IANA registry and a well understood format, they are use to identify payload format in pretty much all other internet technologies like email, HTTP, etc. Data Source Type Why include field length constraints when the only valid values are already enumerated? Expected Result Sensitivity Why include field length constraints when the only valid values are already enumerated? Query Timing Same comment on superfluous field length constraints. Should require specification of timezone as part of timestamp. Query Payload Do we really want the payload to be a character string ? What about native binary query formats. Result Identification "Each Result Response MUST have a reference to the Query Request Metadata for which the results are being sent." - What kind of reference ? Just the query identifier or something else. At a minimum I suggest including the query id to allow query/result correlation. Why constrain result identifiers to be integers ? Instead adopt Content-ID strategy used in MIME. Data Source Identification How is the source information "used by organizations to enforce granular authorization policies" - surely all of the authorization has been done before the results are put in the result envelope ? Result Status Why include field length constraints when the only valid values are already enumerated? Contact email address Why include field length constraints, just refer to RFC 5322 instead. Result Format Use media types (e.g. application/qrda+xml), not arbitrary identifiers (e.g. QRDA). Result Type No need to specify field length constraints when you define an enumeration of allowed values. Result Payload What about native binary formats ? Query Envelope Authentication and Authorization Requirements The MUST requirement to use X.509 is at odds with the otherwise abstract requirements on envelope formats. Should allow use of other identifiers suitable for use with the concrete protocols used in a network. ||
 * Jennifer Cockle || VHA, CHIO, Standards and Interoperability ||  ||   ||
 * Jeremy Davis || Mount Auburn Cambridge, IPA ||  ||   ||
 * Jim Kretz || Center for Mental Health Services of SAMHSA ||  ||   ||
 * Joel T. Ryba || Healthcare Information Xchange of NY ||  ||   ||
 * John T. Donnelly || IntePro Solutions ||  ||   ||
 * John Haughton MD, MS || Covisint ||  ||   ||
 * John Klimek || NCPDP ||  ||   ||
 * John Moehrke || GE HEALTHCARE ||  ||   ||
 * John Sharp || Cleveland Clinic ||  ||   ||
 * John Williams Loonsk || CGI Federal ||  ||   ||
 * John Williams || Health-ISP ||  ||   ||
 * Joseph A Reid || Emergint Technologies, Inc. ||  ||   ||
 * Joycie Hunter || Cal eConnect, Vulcan Enterprises LLC ||  ||   ||
 * Jyoti Pathak || Mayo Clinic ||  ||   ||
 * Kathleen Connor || Baycliffe Strategies Inc || NO || Generally, the metadata attributes on the Query Envelope are not sufficient to provide necessary security and privacy protections, do not use semantically interoperable value sets, and rely on text fields that should be augmented with computable standard codes. Strongly recommend the following:
 * In addition to the text "Query Purpose description", a mandatory Purpose of Use code to convey computable and interoperable purposes for which the query data requested and provided may be used. Recommend using the HL7 value set v: PurposeOfUse
 * A mandatory Confidentiality code conveying the risk of unauthorized disclosure using the HL7 value set v:ConfidentialityCode
 * An optional Obligation attribute to convey mandated security and privacy related requirements using the HL7 v:ObligationPolicy value set
 * An optional Refrain Policy attribute to convey prohibited security and privacy related actions using the HL7 v:RefrainPolicy value set
 * Karen Nielsen || Siemens ||  ||   ||
 * Keith W. Boone || GE Healthcare ||  ||   ||
 * Khaled El Emam || University of Ottawa / Children's Hospital ||  ||   ||
 * Kim Nolen || Pfizer ||  ||   ||
 * Laura J. Miller || National Quality Forum ||  ||   ||
 * Leslie M Tompkins || US FDA / CDRH ||  ||   ||
 * Lin Wan || Axolotl Corp. (now OptumInsight) ||  ||   ||
 * Lindsey Hoggle || Health Project Partners,LLC ||  ||   ||
 * Lynne Gilbertson || NCPDP ||  ||   ||
 * Marc Hadley || MITRE || NO || Terminology References- ISO 11404 General Purpose Datatypes.
 * Marinus Moelker || Mountain Medical Technologies ||  ||   ||
 * Mario Laszczak || STEMSOFT Software Inc. ||  ||   ||
 * Mark Frisse || Vanderbilt University ||  ||   ||
 * Mary Sheridan || Independent ||  ||   ||
 * Michael Buck || Primary Care Information Project in the New York City Department of Health and Mental Hygiene ||  ||   ||
 * Michael M. Talley || Southeast Michigan Health Exchange ||  ||   ||
 * Michael Ryan || SAP ||  ||   ||
 * Michael Sawczyn || Ohio Health Information Partnership ||  ||   ||
 * Michael Trebatoski || SAIC ||  ||   ||
 * Micky Tripathi || Massachusetts eHealth Collaborative ||  ||   ||
 * Mike Spraggins || Seton Hospital ||  ||   ||
 * Mitra Rocca || FDA || Yes ||  ||
 * Mr. Tracy Rue || Quality Health Network ||  ||   ||
 * Nancy Lush || Lush Group, Inc ||  ||   ||
 * Nicholas J. VanDuyne || New York eHealth Collaborative ||  ||   ||
 * Nicole Cook, PhD, MPA || Nova Southeastern University, Masters of Public Health Program ||  ||   ||
 * Nikolay Lipskiy || CDC/OSELS ||  ||   ||
 * Norman Joseph || Mountain Medical Technologies ||  ||   ||
 * Patty Craig || The Joint Commission ||  ||   ||
 * Paul Bleicher, MD PhD || Humedica ||  ||   ||
 * Paul Goldman || Practice Communication, LLC ||  ||   ||
 * Paulo Machado || Health Innovation Partners ||  ||   ||
 * Peter Mork || MITRE ||  ||   ||
 * Ram Gouripeddi || University of Utah ||  ||   ||
 * Robert A. Greenes || Arizona State University ||  ||   ||
 * Robert Barker || NextGen Healthcare ||  ||   ||
 * Robert Dieterle || Enablecare ||  ||   ||
 * Robert McClure, MD || Apelon, Inc ||  ||   ||
 * Robert Stephenson II || CSAP/SAMHSA/HHS ||  ||   ||
 * Ronald Ranauro || College of American Pathologists ||  ||   ||
 * Sam Herbert || Geisinger Health Plan ||  ||   ||
 * Sarianne Gruber || SG Healthcare Analytics ||  ||   ||
 * Saul A. Kravitz || MITRE ||  ||   ||
 * Scott Chapin || MedPlus ||  ||   ||
 * Sean Nolan || Microsoft Health Solutions ||  ||   ||
 * ShaMika Williams || Sage Healthcare ||  ||   ||
 * Shawn Murphy || Massachusetts General Hospital ||  ||   ||
 * Shawn Wiese || Healthcare Managment Systems ||  ||   ||
 * Sheila Woodhouse, MD || Sentikon Consulting, and Sentikon Technologies ||  ||   ||
 * Sri Koka || Techsant Technologies LLC ||  ||   ||
 * SRINI KRISHNAMOORTHY || DISCOVERTURE HEALTH ||  ||   ||
 * Srinivas Velamuri || Telligen || YES ||  ||
 * Stan Norton || Humedica ||  ||   ||
 * Stephen Beller, PhD || National Health Data Systems, Inc. ||  ||   ||
 * Steve Felt || Greenway Medical Technologies ||  ||   ||
 * Steve Rushing || Georgia Tech ||  ||   ||
 * Susan Brink, DrPH || ConsentSolutions, Inc ||  ||   ||
 * Susan Fenton || Texas State University ||  ||   ||
 * Susan Nedza MD || HealthyCircles, LLC ||  ||   ||
 * Taha Kass-Hout || CDC ||  ||   ||
 * Teresa Black || Alere Health ||  ||   ||
 * Teresa Oates RN, MSN || HMS, INC. ||  ||   ||
 * Terri Ripley || Centra ||  ||   ||
 * Teresa Strickland || NCPDP ||  ||   ||
 * Thomas P. Caruso || University of North Carolina-Chapel Hill, School of Information & Library Sciences || NO || I agree with Kathleen Connor and Mark Hadley ||
 * Thompson H. Boyd, III, M.D. || Hahnemann University Hospital ||  ||   ||
 * Thomson Kuhn || American College of Physicians ||  ||   ||
 * Tim Richardson || Medical Arts Rehabilitation, Inc. ||  ||   ||
 * Urmimala Sarkar, MD, MPH || University of California, San Francisco Division of General Internal Medicine, San Francisco General Hospital, Center for Vulnerable Populations ||  ||   ||
 * Vassil Peytchev || Epic ||  ||   ||
 * Vincent Lewis || GSI Health ||  ||   ||
 * Virginia Lorenzi || The NewYork-Prssbyterian Hospital ||  ||   ||
 * Vishnu Vyas || Apixio ||  ||   ||
 * Will Ross || Redwood Mednet ||  ||   ||
 * William Reiter || HealthShare Montana ||  ||   ||
 * Xiaohui Zhang, Ph.D. || Scientific Technologies Corp ||  ||   ||

include component="page" wikiName="siframework" page="space.template.inc_contentleft_end"