Verifiable Health Links
1.0.0-comment - ballot International flag

Verifiable Health Links, published by IHE IT Infrastructure Technical Committee. This guide is not an authorized publication; it is the continuous build for version 1.0.0-comment built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/IHE/ITI.VHL/ and changes regularly. See the Directory of published versions

Requirements: Receive Trust List

Official URL: https://profiles.ihe.net/ITI/VHL/Requirements/ReceiveTrustList Version: 1.0.0-comment
Active as of 2026-06-14 Computable Name: ReceiveTrustList

A VHL Sharer or VHL Receiver, after receiving PKI material from a Trust Anchor, SHALL validate and process the trust information for subsequent cryptographic operations.

Participants SHOULD:

  • Cache the received trust list or certificate material to reduce network and server load
  • Validate digital signatures or trust paths before use in VHL validation or secure channel sessions
  • Monitor certificate expiration or revocation status where applicable

These requirements apply to the following actors:

These requirements derive from Establish Trust

Cache received Trust listSHALL

Cache the received trust list or certificate material to reduce network and server load

Validate digital signaturesSHALL

Validate digital signatures or trust paths

Monitor certificate expirationSHALL

Monitor certificate expiration or revocation status where applicable