Da Vinci Clinical Data Exchange (CDex), published by HL7 International / Payer/Provider Information Exchange Work Group. This guide is not an authorized publication; it is the continuous build for version 2.1.0 built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/davinci-ecdx/ and changes regularly. See the Directory of published versions
| Page standards status: Trial-use | Maturity Level: 2 |
{
"resourceType" : "Requirements",
"id" : "cdex-verifier",
"text" : {
"status" : "generated",
"div" : "<div xmlns=\"http://www.w3.org/1999/xhtml\"><p class=\"res-header-id\"><b>Generated Narrative: Requirements cdex-verifier</b></p><a name=\"cdex-verifier\"> </a><a name=\"hccdex-verifier\"> </a><table class=\"grid\"><tr><td><b><a name=\"CONF-053\"> </a></b>CONF-053</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>[To verify the identity of the entity signing the Bundle or QuestionnaireResponse] One of the certificate Subject Alternative Name (SAN)) <strong>SHALL</strong> match <code>Signature.who.identifier</code> to verify the identity of the entity signing</p>\n</div><p>Links: </p><ul><li>References: <a href=\"signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse\">signatures.html</a></li></ul></td></tr><tr><td><b><a name=\"CONF-054\"> </a></b>CONF-054</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>[To verify the identity of the entity signing the Bundle or QuestionnaireResponse] The <code>"srCms"</code> Signer Commitments header ids <strong>SHALL</strong> match the <code>Signature.type.code</code> elements.</p>\n</div><p>Links: </p><ul><li>References: <a href=\"signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse\">signatures.html</a></li></ul></td></tr><tr><td><b><a name=\"CONF-055\"> </a></b>CONF-055</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>[To verify the identity of the entity signing the Bundle or QuestionnaireResponse] The <code>"sigT"</code> header timestamp <strong>SHALL</strong> match <code>Signature.when</code></p>\n</div><p>Links: </p><ul><li>References: <a href=\"signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse\">signatures.html</a></li></ul></td></tr><tr><td><b><a name=\"CONF-050\"> </a></b>CONF-050</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHOULD\">SHOULD</a></td><td><div><p>[To verify the identity of the entity signing the Bundle or QuestionnaireResponse.] The certificate Issuer <strong>SHOULD</strong> be a trusted CA for the Consumer</p>\n</div><p>Links: </p><ul><li>References: <a href=\"signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse\">signatures.html</a></li></ul></td></tr><tr><td><b><a name=\"CONF-051\"> </a></b>CONF-051</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHOULD\">SHOULD</a></td><td><div><p>[To verify the identity of the entity signing the Bundle or QuestionnaireResponse] The certificate KeyUsage <strong>SHOULD</strong> include 'DigitalSignature'</p>\n</div><p>Links: </p><ul><li>References: <a href=\"signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse\">signatures.html</a></li></ul></td></tr><tr><td><b><a name=\"CONF-052\"> </a></b>CONF-052</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHOULD\">SHOULD</a></td><td><div><p>[To verify the identity of the entity signing the Bundle or QuestionnaireResponse] The certificate Validity Dates <strong>SHOULD</strong> be appropriate/long enough as determined by the business partners</p>\n</div><p>Links: </p><ul><li>References: <a href=\"signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse\">signatures.html</a></li></ul></td></tr></table></div>"
},
"extension" : [
{
"url" : "http://hl7.org/fhir/StructureDefinition/structuredefinition-wg",
"valueCode" : "claims"
},
{
"url" : "http://hl7.org/fhir/StructureDefinition/structuredefinition-fmm",
"valueInteger" : 2,
"_valueInteger" : {
"extension" : [
{
"url" : "http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom",
"valueCanonical" : "http://hl7.org/fhir/us/davinci-cdex/ImplementationGuide/hl7.fhir.us.davinci-cdex"
}
]
}
},
{
"url" : "http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status",
"valueCode" : "trial-use",
"_valueCode" : {
"extension" : [
{
"url" : "http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom",
"valueCanonical" : "http://hl7.org/fhir/us/davinci-cdex/ImplementationGuide/hl7.fhir.us.davinci-cdex"
}
]
}
}
],
"url" : "http://hl7.org/fhir/us/davinci-cdex/Requirements/cdex-verifier",
"identifier" : [
{
"system" : "urn:ietf:rfc:3986",
"value" : "urn:oid:2.16.840.1.113883.4.642.40.21.36.5"
}
],
"version" : "2.1.0",
"name" : "CDexVerifierRequirements",
"title" : "CDex Verifier Requirements",
"status" : "draft",
"date" : "2026-07-09T22:52:27+00:00",
"publisher" : "HL7 International / Payer/Provider Information Exchange Work Group",
"contact" : [
{
"name" : "HL7 International / Payer/Provider Information Exchange Work Group",
"telecom" : [
{
"system" : "url",
"value" : "http://www.hl7.org/Special/committees/claims"
},
{
"system" : "email",
"value" : "pie@lists.hl7.org"
}
]
}
],
"description" : "This [Requirements](https://hl7.org/fhir/R5/requirements.html) resource lists all the CDex Verifier requirements defined in the narrative sections of this IG.",
"jurisdiction" : [
{
"coding" : [
{
"system" : "urn:iso:std:iso:3166",
"code" : "US"
}
]
}
],
"copyright" : "Used by permission of HL7 International all rights reserved Creative Commons License",
"statement" : [
{
"key" : "CONF-053",
"conformance" : [
"SHALL"
],
"requirement" : "[To verify the identity of the entity signing the Bundle or QuestionnaireResponse] One of the certificate Subject Alternative Name (SAN)) **SHALL** match `Signature.who.identifier` to verify the identity of the entity signing",
"reference" : [
"signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
]
},
{
"key" : "CONF-054",
"conformance" : [
"SHALL"
],
"requirement" : "[To verify the identity of the entity signing the Bundle or QuestionnaireResponse] The `\"srCms\"` Signer Commitments header ids **SHALL** match the `Signature.type.code` elements.",
"reference" : [
"signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
]
},
{
"key" : "CONF-055",
"conformance" : [
"SHALL"
],
"conditionality" : true,
"requirement" : "[To verify the identity of the entity signing the Bundle or QuestionnaireResponse] The `\"sigT\"` header timestamp **SHALL** match `Signature.when`",
"reference" : [
"signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
]
},
{
"key" : "CONF-050",
"conformance" : [
"SHOULD"
],
"requirement" : "[To verify the identity of the entity signing the Bundle or QuestionnaireResponse.] The certificate Issuer **SHOULD** be a trusted CA for the Consumer",
"reference" : [
"signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
]
},
{
"key" : "CONF-051",
"conformance" : [
"SHOULD"
],
"requirement" : "[To verify the identity of the entity signing the Bundle or QuestionnaireResponse] The certificate KeyUsage **SHOULD** include 'DigitalSignature'",
"reference" : [
"signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
]
},
{
"key" : "CONF-052",
"conformance" : [
"SHOULD"
],
"requirement" : "[To verify the identity of the entity signing the Bundle or QuestionnaireResponse] The certificate Validity Dates **SHOULD** be appropriate/long enough as determined by the business partners",
"reference" : [
"signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
]
}
]
}