National Directory of Healthcare Providers & Services (NDH) Implementation Guide
2.0.0-current - ci-build

National Directory of Healthcare Providers & Services (NDH) Implementation Guide, published by HL7 International / Patient Administration. This guide is not an authorized publication; it is the continuous build for version 2.0.0-current built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/fhir-us-ndh/ and changes regularly. See the Directory of published versions

## : Endpoint Access Control Mechanism Code System - TTL Representation

Page standards status: Trial-use | Maturity Level: 4

Raw ttl | Download

    @prefix fhir: <http://hl7.org/fhir/> .
    @prefix owl: <http://www.w3.org/2002/07/owl#> .
    @prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
    @prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
    @prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

    # - resource -------------------------------------------------------------------

     a fhir:CodeSystem ;
      fhir:nodeRole fhir:treeRoot ;
      fhir:id [ fhir:v "NdhEndpointAccessControlMechanismCS"] ; #
      fhir:text [
    fhir:status [ fhir:v "generated" ] ;
    fhir:div [ fhir:v "<div xmlns=\"http://www.w3.org/1999/xhtml\"><p class=\"res-header-id\"><b>Generated Narrative: CodeSystem NdhEndpointAccessControlMechanismCS</b></p><a name=\"NdhEndpointAccessControlMechanismCS\"> </a><a name=\"hcNdhEndpointAccessControlMechanismCS\"> </a><p>This case-sensitive code system <code>http://hl7.org/fhir/us/ndh/CodeSystem/NdhEndpointAccessControlMechanismCS</code> defines the following codes:</p><table class=\"codes\"><tr><td style=\"white-space:nowrap\"><b>Code</b></td><td><b>Display</b></td><td><b>Definition</b></td></tr><tr><td style=\"white-space:nowrap\">public<a name=\"NdhEndpointAccessControlMechanismCS-public\"> </a></td><td>Public</td><td>Public access without any specific access control.</td></tr><tr><td style=\"white-space:nowrap\">OAuth<a name=\"NdhEndpointAccessControlMechanismCS-OAuth\"> </a></td><td>OAuth</td><td>OAuth (unspecified version see oauth.net).</td></tr><tr><td style=\"white-space:nowrap\">SMART-on-FHIR<a name=\"NdhEndpointAccessControlMechanismCS-SMART-on-FHIR\"> </a></td><td>SMART-on-FHIR</td><td>OAuth2 using SMART-on-FHIR profile (see http://docs.smarthealthit.org/).</td></tr><tr><td style=\"white-space:nowrap\">NTLM<a name=\"NdhEndpointAccessControlMechanismCS-NTLM\"> </a></td><td>NTLM</td><td>Microsoft NTLM Authentication.</td></tr><tr><td style=\"white-space:nowrap\">basic<a name=\"NdhEndpointAccessControlMechanismCS-basic\"> </a></td><td>Basic</td><td>Basic authentication defined in HTTP specification.</td></tr><tr><td style=\"white-space:nowrap\">Kerberos<a name=\"NdhEndpointAccessControlMechanismCS-Kerberos\"> </a></td><td>Kerberos</td><td>see http://www.ietf.org/rfc/rfc4120.txt.</td></tr><tr><td style=\"white-space:nowrap\">Certificates<a name=\"NdhEndpointAccessControlMechanismCS-Certificates\"> </a></td><td>Certificates</td><td>SSL where client must have a certificate registered with the server.</td></tr><tr><td style=\"white-space:nowrap\">opaque-access-token<a name=\"NdhEndpointAccessControlMechanismCS-opaque-access-token\"> </a></td><td>Opaque Access Token</td><td>Uses an opaque token for access control, which is a token whose structure is not visible or meaningful to the client.</td></tr><tr><td style=\"white-space:nowrap\">jwt-access-token<a name=\"NdhEndpointAccessControlMechanismCS-jwt-access-token\"> </a></td><td>JWT Access Token</td><td>Uses a JSON Web Token (JWT) for access control, which is a compact, URL-safe means of representing claims to be transferred between two parties.</td></tr><tr><td style=\"white-space:nowrap\">mutual-tls<a name=\"NdhEndpointAccessControlMechanismCS-mutual-tls\"> </a></td><td>Mutual TLS</td><td>Uses mutual Transport Layer Security (TLS) where both client and server authenticate each other using certificates.</td></tr><tr><td style=\"white-space:nowrap\">wss-saml-token<a name=\"NdhEndpointAccessControlMechanismCS-wss-saml-token\"> </a></td><td>WSS SAML Token</td><td>Uses a Security Assertion Markup Language (SAML) token within the Web Services Security (WSS) framework for access control.</td></tr><tr><td style=\"white-space:nowrap\">wss-username-token<a name=\"NdhEndpointAccessControlMechanismCS-wss-username-token\"> </a></td><td>WSS User Name Token</td><td>Uses a username token within the WSS framework for access control.</td></tr><tr><td style=\"white-space:nowrap\">wss-kerberos-token<a name=\"NdhEndpointAccessControlMechanismCS-wss-kerberos-token\"> </a></td><td>WSS Kerberos Token</td><td>Uses a Kerberos token within the WSS framework for access control.</td></tr><tr><td style=\"white-space:nowrap\">wss-x509-token<a name=\"NdhEndpointAccessControlMechanismCS-wss-x509-token\"> </a></td><td>WSS X509 Token</td><td>Uses an X.509 certificate token within the WSS framework for access control.</td></tr><tr><td style=\"white-space:nowrap\">wss-custom-token<a name=\"NdhEndpointAccessControlMechanismCS-wss-custom-token\"> </a></td><td>WSS Custom Token</td><td>Uses a custom token within the WSS framework for access control.</td></tr></table></div>"^^rdf:XMLLiteral ]
      ] ; #
      fhir:extension ( [
    fhir:url [
    fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-wg"^^xsd:anyURI ;
    fhir:l <http://hl7.org/fhir/StructureDefinition/structuredefinition-wg>     ] ;
    fhir:value [
    a fhir:Code ;
    fhir:v "pa"     ]
      ] [
    fhir:url [
    fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-fmm"^^xsd:anyURI ;
    fhir:l <http://hl7.org/fhir/StructureDefinition/structuredefinition-fmm>     ] ;
    fhir:value [
    a fhir:Integer ;
    fhir:v 4 ;
          ( fhir:extension [
    fhir:url [
    fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom"^^xsd:anyURI ;
    fhir:l <http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom>         ] ;
    fhir:value [
    a fhir:Canonical ;
    fhir:v "http://hl7.org/fhir/us/ndh/ImplementationGuide/hl7.fhir.us.ndh"^^xsd:anyURI ;
    fhir:l <http://hl7.org/fhir/us/ndh/ImplementationGuide/hl7.fhir.us.ndh>         ]       ] )     ]
      ] [
    fhir:url [
    fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status"^^xsd:anyURI ;
    fhir:l <http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status>     ] ;
    fhir:value [
    a fhir:Code ;
    fhir:v "trial-use" ;
          ( fhir:extension [
    fhir:url [
    fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom"^^xsd:anyURI ;
    fhir:l <http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom>         ] ;
    fhir:value [
    a fhir:Canonical ;
    fhir:v "http://hl7.org/fhir/us/ndh/ImplementationGuide/hl7.fhir.us.ndh"^^xsd:anyURI ;
    fhir:l <http://hl7.org/fhir/us/ndh/ImplementationGuide/hl7.fhir.us.ndh>         ]       ] )     ]
      ] ) ; #
      fhir:url [
    fhir:v "http://hl7.org/fhir/us/ndh/CodeSystem/NdhEndpointAccessControlMechanismCS"^^xsd:anyURI ;
    fhir:l <http://hl7.org/fhir/us/ndh/CodeSystem/NdhEndpointAccessControlMechanismCS>
      ] ; #
      fhir:version [ fhir:v "2.0.0-current"] ; #
      fhir:name [ fhir:v "NdhEndpointAccessControlMechanismCS"] ; #
      fhir:title [ fhir:v "Endpoint Access Control Mechanism Code System"] ; #
      fhir:status [ fhir:v "active"] ; #
      fhir:experimental [ fhir:v false] ; #
      fhir:date [ fhir:v "2026-03-23T21:58:05+00:00"^^xsd:dateTime] ; #
      fhir:publisher [ fhir:v "HL7 International / Patient Administration"] ; #
      fhir:contact ( [
    fhir:name [ fhir:v "HL7 International / Patient Administration" ] ;
        ( fhir:telecom [
    fhir:system [ fhir:v "url" ] ;
    fhir:value [ fhir:v "http://www.hl7.org/Special/committees/pafm" ]     ] [
    fhir:system [ fhir:v "email" ] ;
    fhir:value [ fhir:v "pafm@lists.hl7.org" ]     ] )
      ] ) ; #
      fhir:description [ fhir:v "Endpoint Access Control Mechanism"] ; #
      fhir:jurisdiction ( [
        ( fhir:coding [
    fhir:system [
    fhir:v "urn:iso:std:iso:3166"^^xsd:anyURI ;
    fhir:l <urn:iso:std:iso:3166>       ] ;
    fhir:code [ fhir:v "US" ] ;
    fhir:display [ fhir:v "United States of America" ]     ] )
      ] ) ; #
      fhir:caseSensitive [ fhir:v true] ; #
      fhir:content [ fhir:v "complete"] ; #
      fhir:count [ fhir:v "15"^^xsd:nonNegativeInteger] ; #
      fhir:concept ( [
    fhir:code [ fhir:v "public" ] ;
    fhir:display [ fhir:v "Public" ] ;
    fhir:definition [ fhir:v "Public access without any specific access control." ]
      ] [
    fhir:code [ fhir:v "OAuth" ] ;
    fhir:display [ fhir:v "OAuth" ] ;
    fhir:definition [ fhir:v "OAuth (unspecified version see oauth.net)." ]
      ] [
    fhir:code [ fhir:v "SMART-on-FHIR" ] ;
    fhir:display [ fhir:v "SMART-on-FHIR" ] ;
    fhir:definition [ fhir:v "OAuth2 using SMART-on-FHIR profile (see http://docs.smarthealthit.org/)." ]
      ] [
    fhir:code [ fhir:v "NTLM" ] ;
    fhir:display [ fhir:v "NTLM" ] ;
    fhir:definition [ fhir:v "Microsoft NTLM Authentication." ]
      ] [
    fhir:code [ fhir:v "basic" ] ;
    fhir:display [ fhir:v "Basic" ] ;
    fhir:definition [ fhir:v "Basic authentication defined in HTTP specification." ]
      ] [
    fhir:code [ fhir:v "Kerberos" ] ;
    fhir:display [ fhir:v "Kerberos" ] ;
    fhir:definition [ fhir:v "see http://www.ietf.org/rfc/rfc4120.txt." ]
      ] [
    fhir:code [ fhir:v "Certificates" ] ;
    fhir:display [ fhir:v "Certificates" ] ;
    fhir:definition [ fhir:v "SSL where client must have a certificate registered with the server." ]
      ] [
    fhir:code [ fhir:v "opaque-access-token" ] ;
    fhir:display [ fhir:v "Opaque Access Token" ] ;
    fhir:definition [ fhir:v "Uses an opaque token for access control, which is a token whose structure is not visible or meaningful to the client." ]
      ] [
    fhir:code [ fhir:v "jwt-access-token" ] ;
    fhir:display [ fhir:v "JWT Access Token" ] ;
    fhir:definition [ fhir:v "Uses a JSON Web Token (JWT) for access control, which is a compact, URL-safe means of representing claims to be transferred between two parties." ]
      ] [
    fhir:code [ fhir:v "mutual-tls" ] ;
    fhir:display [ fhir:v "Mutual TLS" ] ;
    fhir:definition [ fhir:v "Uses mutual Transport Layer Security (TLS) where both client and server authenticate each other using certificates." ]
      ] [
    fhir:code [ fhir:v "wss-saml-token" ] ;
    fhir:display [ fhir:v "WSS SAML Token" ] ;
    fhir:definition [ fhir:v "Uses a Security Assertion Markup Language (SAML) token within the Web Services Security (WSS) framework for access control." ]
      ] [
    fhir:code [ fhir:v "wss-username-token" ] ;
    fhir:display [ fhir:v "WSS User Name Token" ] ;
    fhir:definition [ fhir:v "Uses a username token within the WSS framework for access control." ]
      ] [
    fhir:code [ fhir:v "wss-kerberos-token" ] ;
    fhir:display [ fhir:v "WSS Kerberos Token" ] ;
    fhir:definition [ fhir:v "Uses a Kerberos token within the WSS framework for access control." ]
      ] [
    fhir:code [ fhir:v "wss-x509-token" ] ;
    fhir:display [ fhir:v "WSS X509 Token" ] ;
    fhir:definition [ fhir:v "Uses an X.509 certificate token within the WSS framework for access control." ]
      ] [
    fhir:code [ fhir:v "wss-custom-token" ] ;
    fhir:display [ fhir:v "WSS Custom Token" ] ;
    fhir:definition [ fhir:v "Uses a custom token within the WSS framework for access control." ]
      ] ) . #