Basic Audit Log Patterns (BALP)
1.1.4-current - ci-build International flag

Basic Audit Log Patterns (BALP), published by IHE IT Infrastructure Technical Committee. This guide is not an authorized publication; it is the continuous build for version 1.1.4-current built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/IHE/ITI.BasicAudit/ and changes regularly. See the Directory of published versions

: Audit Example of a basic SAML access token of comprehensive - TTL Representation

Raw ttl | Download


@prefix fhir: <http://hl7.org/fhir/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

# - resource -------------------------------------------------------------------

 a fhir:AuditEvent ;
  fhir:nodeRole fhir:treeRoot ;
  fhir:id [ fhir:v "ex-auditPoke-SAML-Comp"] ; # 
  fhir:meta [
    ( fhir:profile [
fhir:v "https://profiles.ihe.net/ITI/BALP/StructureDefinition/IHE.BasicAudit.SAMLaccessTokenUse.Comprehensive"^^xsd:anyURI ;
fhir:link <https://profiles.ihe.net/ITI/BALP/StructureDefinition/IHE.BasicAudit.SAMLaccessTokenUse.Comprehensive>     ] ) ;
    ( fhir:security [
fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActReason"^^xsd:anyURI ] ;
fhir:code [ fhir:v "HTEST" ]     ] )
  ] ; # 
  fhir:text [
fhir:status [ fhir:v "extensions" ] ;
fhir:div "<div xmlns=\"http://www.w3.org/1999/xhtml\"><p class=\"res-header-id\"><b>Generated Narrative: AuditEvent ex-auditPoke-SAML-Comp</b></p><a name=\"ex-auditPoke-SAML-Comp\"> </a><a name=\"hcex-auditPoke-SAML-Comp\"> </a><a name=\"ex-auditPoke-SAML-Comp-en-US\"> </a><p><b>type</b>: <a href=\"http://hl7.org/fhir/R4/codesystem-dicom-dcim.html#dicom-dcim-110100\">DICOM 110100</a>: Application Activity</p><p><b>subtype</b>: unknown poke: Boredom poke</p><p><b>action</b>: Read/View/Print</p><p><b>recorded</b>: 2021-12-03 09:49:00+0000</p><p><b>outcome</b>: Success</p><blockquote><p><b>agent</b></p><p><b>AuditEvent.agent Assurance Level</b>: <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ObservationValue LOAAP4}\">high authentication process level of assurance</span></p><p><b>AuditEvent.agent other identifiers</b>: SAML subject-id/JohnDoe</p><p><b>AuditEvent.agent other identifiers</b>: National provider identifier/1234567@myNPIregistry.example.org</p><p><b>AuditEvent.agent other identifiers</b>: Provider number/JohnD</p><p><b>type</b>: <span title=\"Codes:{https://profiles.ihe.net/ITI/BALP/CodeSystem/UserAgentTypes UserSamlAgent}, {http://terminology.hl7.org/CodeSystem/v3-ParticipationType IRCP}\">information recipient</span></p><p><b>who</b>: Identifier: <code>https://sts.sykehuspartner.no</code>/05086900124</p><p><b>requestor</b>: true</p><p><b>policy</b>: XC4WdYS0W5bjsMGc5Ue6tClD_5U</p><p><b>purposeOfUse</b>: <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActReason PATRQT}\">patient requested</span></p></blockquote><blockquote><p><b>agent</b></p><p><b>type</b>: <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-RoleClass PROV}\">healthcare provider</span></p><p><b>who</b>: St. Mary of Examples (Identifier: 1234567@myOrganizationRegistry.example.org)</p><p><b>requestor</b>: false</p></blockquote><blockquote><p><b>agent</b></p><p><b>type</b>: <span title=\"Codes:{urn:ihe:iti:xca:2010 homeCommunityId}\">homeCommunityId</span></p><p><b>who</b>: Identifier: homeCommunityId/urn:uuid:cadbf8d0-5493-11ec-bf63-0242ac130002</p><p><b>requestor</b>: false</p></blockquote><h3>Sources</h3><table class=\"grid\"><tr><td style=\"display: none\">-</td><td><b>Site</b></td><td><b>Observer</b></td><td><b>Type</b></td></tr><tr><td style=\"display: none\">*</td><td>server.example.com</td><td><a href=\"Device-ex-device.html\">Device</a></td><td><a href=\"http://terminology.hl7.org/6.0.2/CodeSystem-security-source-type.html#security-source-type-4\">Audit Event Source Type 4</a>: Application Server</td></tr></table><blockquote><p><b>entity</b></p><p><b>what</b>: Identifier: urn:uuid:a4b1d27e-5493-11ec-bf63-0242ac130002</p><p><b>type</b>: <a href=\"http://hl7.org/fhir/R4/codesystem-resource-types.html#resource-types-Consent\">ResourceType Consent</a>: Consent</p><blockquote><p><b>detail</b></p><p><b>type</b>: urn:ihe:iti:xua:2012:acp</p><p><b>value</b>: urn:uuid:b8aa8eec-5493-11ec-bf63-0242ac130002</p></blockquote><blockquote><p><b>detail</b></p><p><b>type</b>: urn:oasis:names:tc:xacml:2.0:resource:resource-id</p><p><b>value</b>: urn:uuid:d7391e5a-5493-11ec-bf63-0242ac130002</p></blockquote></blockquote></div>"
  ] ; # 
  fhir:type [
fhir:system [ fhir:v "http://dicom.nema.org/resources/ontology/DCM"^^xsd:anyURI ] ;
fhir:code [ fhir:v "110100" ] ;
fhir:display [ fhir:v "Application Activity" ]
  ] ; # 
  fhir:subtype ( [
fhir:system [ fhir:v "urn:ietf:rfc:1438"^^xsd:anyURI ] ;
fhir:code [ fhir:v "poke" ] ;
fhir:display [ fhir:v "Boredom poke" ]
  ] ) ; # 
  fhir:action [ fhir:v "R"] ; # 
  fhir:recorded [ fhir:v "2021-12-03T09:49:00.000Z"^^xsd:dateTime] ; # 
  fhir:outcome [ fhir:v "0"] ; # 
  fhir:agent ( [
    ( fhir:extension [
fhir:url [ fhir:v "https://profiles.ihe.net/ITI/BALP/StructureDefinition/ihe-assuranceLevel"^^xsd:anyURI ] ;
fhir:value [
a fhir:CodeableConcept ;
        ( fhir:coding [
fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ObservationValue"^^xsd:anyURI ] ;
fhir:code [ fhir:v "LOAAP4" ]         ] )       ]     ] [
fhir:url [ fhir:v "https://profiles.ihe.net/ITI/BALP/StructureDefinition/ihe-otherId"^^xsd:anyURI ] ;
fhir:value [
a fhir:Identifier ;
fhir:type [
          ( fhir:coding [
fhir:system [ fhir:v "https://profiles.ihe.net/ITI/BALP/CodeSystem/OtherIdentifierTypes"^^xsd:anyURI ] ;
fhir:code [ fhir:v "SAML-subject-id" ]           ] )         ] ;
fhir:value [ fhir:v "JohnDoe" ]       ]     ] [
fhir:url [ fhir:v "https://profiles.ihe.net/ITI/BALP/StructureDefinition/ihe-otherId"^^xsd:anyURI ] ;
fhir:value [
a fhir:Identifier ;
fhir:type [
          ( fhir:coding [
fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v2-0203"^^xsd:anyURI ] ;
fhir:code [ fhir:v "NPI" ]           ] )         ] ;
fhir:value [ fhir:v "1234567@myNPIregistry.example.org" ]       ]     ] [
fhir:url [ fhir:v "https://profiles.ihe.net/ITI/BALP/StructureDefinition/ihe-otherId"^^xsd:anyURI ] ;
fhir:value [
a fhir:Identifier ;
fhir:type [
          ( fhir:coding [
fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v2-0203"^^xsd:anyURI ] ;
fhir:code [ fhir:v "PRN" ]           ] )         ] ;
fhir:value [ fhir:v "JohnD" ]       ]     ] ) ;
fhir:type [
      ( fhir:coding [
fhir:system [ fhir:v "https://profiles.ihe.net/ITI/BALP/CodeSystem/UserAgentTypes"^^xsd:anyURI ] ;
fhir:code [ fhir:v "UserSamlAgent" ]       ] [
fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ParticipationType"^^xsd:anyURI ] ;
fhir:code [ fhir:v "IRCP" ] ;
fhir:display [ fhir:v "information recipient" ]       ] )     ] ;
fhir:who [
fhir:identifier [
fhir:system [ fhir:v "https://sts.sykehuspartner.no"^^xsd:anyURI ] ;
fhir:value [ fhir:v "05086900124" ]       ]     ] ;
fhir:requestor [ fhir:v "true"^^xsd:boolean ] ;
    ( fhir:policy [ fhir:v "XC4WdYS0W5bjsMGc5Ue6tClD_5U"^^xsd:anyURI ] ) ;
    ( fhir:purposeOfUse [
      ( fhir:coding [
fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActReason"^^xsd:anyURI ] ;
fhir:code [ fhir:v "PATRQT" ]       ] )     ] )
  ] [
fhir:type [
      ( fhir:coding [
fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-RoleClass"^^xsd:anyURI ] ;
fhir:code [ fhir:v "PROV" ] ;
fhir:display [ fhir:v "healthcare provider" ]       ] )     ] ;
fhir:who [
fhir:identifier [
fhir:value [ fhir:v "1234567@myOrganizationRegistry.example.org" ]       ] ;
fhir:display [ fhir:v "St. Mary of Examples" ]     ] ;
fhir:requestor [ fhir:v "false"^^xsd:boolean ]
  ] [
fhir:type [
      ( fhir:coding [
fhir:system [ fhir:v "urn:ihe:iti:xca:2010"^^xsd:anyURI ] ;
fhir:code [ fhir:v "homeCommunityId" ]       ] )     ] ;
fhir:who [
fhir:identifier [
fhir:type [
          ( fhir:coding [
fhir:system [ fhir:v "urn:ihe:iti:xca:2010"^^xsd:anyURI ] ;
fhir:code [ fhir:v "homeCommunityId" ]           ] )         ] ;
fhir:value [ fhir:v "urn:uuid:cadbf8d0-5493-11ec-bf63-0242ac130002" ]       ]     ] ;
fhir:requestor [ fhir:v "false"^^xsd:boolean ]
  ] ) ; # 
  fhir:source [
fhir:site [ fhir:v "server.example.com" ] ;
fhir:observer [
fhir:reference [ fhir:v "Device/ex-device" ]     ] ;
    ( fhir:type [
fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/security-source-type"^^xsd:anyURI ] ;
fhir:code [ fhir:v "4" ] ;
fhir:display [ fhir:v "Application Server" ]     ] )
  ] ; # 
  fhir:entity ( [
fhir:what [
fhir:identifier [
fhir:value [ fhir:v "urn:uuid:a4b1d27e-5493-11ec-bf63-0242ac130002" ]       ]     ] ;
fhir:type [
fhir:system [ fhir:v "http://hl7.org/fhir/resource-types"^^xsd:anyURI ] ;
fhir:code [ fhir:v "Consent" ] ;
fhir:display [ fhir:v "Consent" ]     ] ;
    ( fhir:detail [
fhir:type [ fhir:v "urn:ihe:iti:xua:2012:acp" ] ;
fhir:value [ fhir:v "urn:uuid:b8aa8eec-5493-11ec-bf63-0242ac130002" ]     ] [
fhir:type [ fhir:v "urn:oasis:names:tc:xacml:2.0:resource:resource-id" ] ;
fhir:value [ fhir:v "urn:uuid:d7391e5a-5493-11ec-bf63-0242ac130002" ]     ] )
  ] ) . #