CH Health Dossier (R4), published by eHealth Suisse. This guide is not an authorized publication; it is the continuous build for version 1.0.0-preview built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/ehealthsuisse/ch-health-dossier/ and changes regularly. See the Directory of published versions
Sequence Diagrams
Sample sequence diagrams to illustrate the usage for reading documents as a patient or healthcare professional:
Patient access from a portal
Patient Portal Community Components IdP App GUI Document Consumer Document Consumer Document Consumer Document Consumer Authorization Client Authorization Server Authorization Server Document Responder Document Responder Document Responder Document Responder Patient App GUI Document Consumer Authorization Client Authorization Server Document Responder User Patient Patient App GUI App GUI Document Consumer (MHD) Document Consumer (MHD) Authorization Client (IUA) Authorization Client (IUA) Authorization Server (IUA) Authorization Server (IUA) Document Responder (MHD) Document Responder (MHD) User Authentication Provider User Authentication Provider App GUI Document Consumer Document Consumer Document Consumer Document Consumer Authorization Client Authorization Server Authorization Server Document Responder Document Responder Document Responder Document Responder [01] read doc [02] GET /.well-known/smart-configuration [03] Conformance statement incl. OAuth 2.1 endpoints opt [IUA with JWT option] [04] Get Access Token [05] [ITI-71] Get Access Token [Extended access token] [06] [ITI-71] Get Access Token Response [Extended access token] [07] alt [IUA JWT Token option] [08] query documents with extended access token [09] query documents [ITI-67] with extended access token [10] [11] [12] retrieve documents with extended access token [13] retrieve document [ITI-68] with extended access token [14] [15] [mTLS] [16] query documents using XUA token and mTLS [17] query documents [ITI-67] with XUA token and mTLS [18] [19] [20] retrieve documents using XUA token and mTLS [21] retrieve document [ITI-68] with XUA token and mTLS [22] [23] [24] User Access from an integrated Primary System to read documents
Healthcare Professional Portal or Primary System Community Components IdP App GUI Document Consumer Document Consumer Document Consumer Document Consumer Authorization Client Authorization Server Authorization Server Document Responder Document Responder Document Responder Document Responder Healthcare App GUI Document Consumer Authorization Client Authorization Server Document Responder User Healthcare Professional Healthcare Professional App GUI App GUI Document Consumer (MHD) Document Consumer (MHD) Authorization Client (IUA) Authorization Client (IUA) Authorization Server (IUA) Authorization Server (IUA) Document Responder (MHD) Document Responder (MHD) User Authentication Provider User Authentication Provider App GUI Document Consumer Document Consumer Document Consumer Document Consumer Authorization Client Authorization Server Authorization Server Document Responder Document Responder Document Responder Document Responder [01] read doc [02] GET /.well-known/smart-configuration [03] Conformance statement incl. OAuth 2.1 endpoints opt [IUA with JWT option] [04] Get Access Token [05] [ITI-71] Get Access Token [Extended access token] [06] [ITI-71] Get Access Token Response [Extended access token] [07] alt [IUA JWT Token option] [08] query documents with extended access token [09] query documents [ITI-67] with extended access token [10] [11] [12] retrieve documents with extended access token [13] retrieve document [ITI-68] with extended access token [14] [15] [mTLS] [16] query documents using XUA token and mTLS [17] query documents [ITI-67] with XUA token and mTLS [18] [19] [20] retrieve documents using XUA token and mTLS [21] retrieve document [ITI-68] with XUA token and mTLS [22] [23] [24] User Access from an integrated Primary System to publish documents
Healthcare Professional Portal or Primary System Community Components IdP App GUI Document Source Document Source Authorization Client Authorization Server Authorization Server Document Recipient Document Recipient Healthcare App GUI Document Source Authorization Client Authorization Server Document Recipient User Healthcare Professional Healthcare Professional App GUI App GUI Document Source (MHD) Document Source (MHD) Authorization Client (IUA) Authorization Client (IUA) Authorization Server (IUA) Authorization Server (IUA) Document Recipient (MHD) Document Recipient (MHD) User Authentication Provider User Authentication Provider App GUI Document Source Document Source Authorization Client Authorization Server Authorization Server Document Recipient Document Recipient [01] write doc [02] GET /.well-known/smart-configuration [03] Conformance statement incl. OAuth 2.1 endpoints opt [IUA with JWT option] [04] Get Access Token [05] [ITI-71] Get Access Token [Extended access token] [06] [ITI-71] Get Access Token Response [Extended access token] [07] alt [IUA JWT Token option] [08] publish document with extended access token loop [For the access decision enforcement, the EPR relies on the Confidentiality Code within the document metadata to be stored in the patient’s Health Record. A patient can set the default Confidentiality Code and a document source needs to iterate over the different confidentiality code until successful] [09] publish document [ITI-65] with extended access token [10] [11] [mTLS] [12] publish document with XUA token and mTLS loop [For the access decision enforcement, the EPR relies on the Confidentiality Code within the document metadata to be stored in the patient’s Health Record. A patient can set the default Confidentiality Code and a document source needs to iterate over the different confidentiality code until successful] [13] publish document [ITI-65] with extended access token [14] [15] [16] Writing documents from clinical archives
Clinical Archive Community Components Technical User Document Source Document Source Patient Identifier Authorization Client Authorization Client Patient Identifier Authorization Server Authorization Server Authorization Server Document Recipient Document Recipient Technical User Document Source Patient Identifier Authorization Client Patient Identifier Authorization Server Document Recipient Technical User Technical User Document Source (MHD) Document Source (MHD) Patient Identifier Cross-reference Consumer Patient Identifier Cross-reference Consumer Authorization Client (IUA) Authorization Client (IUA) Patient Identifier Cross-reference Manger Patient Identifier Cross-reference Manger Authorization Server (IUA) Authorization Server (IUA) Document Recipient (MHD) Document Recipient (MHD) Technical User Document Source Document Source Patient Identifier Authorization Client Authorization Client Patient Identifier Authorization Server Authorization Server Authorization Server Document Recipient Document Recipient [01] GET /.well-known/smart-configuration [02] Conformance statement incl. OAuth 2.1 endpoints opt [IUA JWT Token option] [03] Get Access Token [04] [ITI-71] Get Access Token Request Client Credential Grant Type - [Basic access token] [05] [ITI-71] Get Access Token Response Client Credential Grant Type -[Basic access token] [06] [07] query EPR-SPID from MPI using local ID and access token [08] [ITI-83] Mobile Patient Identifier Cross-reference Query [local ID] together with access token [09] [ITI-83] Mobile Patient Identifier Cross-reference Query Response [EPR-SPID] [10] opt [IUA with JWT option] [11] Get Access Token [12] [ITI-71] Get Access Token [Extended access token] [13] [ITI-71] Get Access Token Response [Extended access token] [14] alt [IUA JWT Token option] [15] publish document with extended access token loop [For the access decision enforcement, the EPR relies on the Confidentiality Code within the document metadata to be stored in the patient’s Health Record. A patient can set the default Confidentiality Code and a document source needs to iterate over the different confidentiality code until successful] [16] publish document [ITI-65] with extended access token [17] [18] [mTLS] [19] publish document with XUA token and mTLS loop [For the access decision enforcement, the EPR relies on the Confidentiality Code within the document metadata to be stored in the patient’s Health Record. A patient can set the default Confidentiality Code and a document source needs to iterate over the different confidentiality code until successful] [20] publish document [ITI-65] with extended access token [21] [22] Patient: get document with a SMART on FHIR app
Patient Portal SMART on FHIR App Community Components IdP App GUI App GUI Document Consumer Document Consumer Authorization Server Authorization Server Authorization Server Document Responder Document Responder User Patient App GUI Authorization Client App GUI Document Consumer Authorization Server Document Responder User Patient Patient App GUI IUA Authorization Client App GUI IUA Authorization Client Authorization Client (IUA) Authorization Client (IUA) App GUI IUA Authorization Client App GUI IUA Authorization Client Document Consumer (MHD) Document Consumer (MHD) Authorization Server (IUA) Authorization Server (IUA) Document Responder (MHD) Document Responder (MHD) User Authentication Provider User Authentication Provider App GUI App GUI Document Consumer Document Consumer Authorization Server Authorization Server Authorization Server Document Responder Document Responder User [01] read doc [02] GET /.well-known/smart-configuration [03] Conformance statement incl. OAuth 2.1 endpoints [04] launch app [05] GET /.well-known/smart-configuration [06] Conformance statement incl. OAuth 2.1 endpoints [07] CH:XUA Authenticate User [08] [09] [ITI-71] Get Access Token [Extended access token] [10] [ITI-71] Get Access Token Response [Extended access token] [11] query documents with extended access token [12] query documents [ITI-67] with extended access token [13] [14] [15] retrieve document with extended access token [16] retrieve document [ITI-68] with extended access token [17] [18] [19] [20] Healthcare professional: get document with a SMART on FHIR app (EHR Launch)
Healthcare Professional Portal or Primary System SMART on FHIR App Community Components IdP App GUI App GUI Authorization Server Authorization Server Authorization Server Document Responder Document Responder User docconsumer docconsumer Healthcare App GUI Authorization Client Patient Identifier App GUI Authorization Server Document Responder User docconsumer Healthcare Professional Healthcare Professional App GUI IUA Authorization Client App GUI IUA Authorization Client Authorization Client (IUA) Authorization Client (IUA) Patient Identifier Cross-reference Consumer Patient Identifier Cross-reference Consumer App GUI IUA Authorization Client App GUI IUA Authorization Client Authorization Server (IUA) Authorization Server (IUA) Document Responder (MHD) Document Responder (MHD) User Authentication Provider User Authentication Provider docconsumer docconsumer App GUI App GUI Authorization Server Authorization Server Authorization Server Document Responder Document Responder User docconsumer docconsumer [01] read doc [02] GET /.well-known/smart-configuration [03] Conformance statement incl. OAuth 2.1 endpoints [04] launch app [05] GET /.well-known/smart-configuration [06] Conformance statement incl. OAuth 2.1 endpoints [07] CH:XUA Authenticate User [08] [09] [ITI-71] Get Access Token [Extended access token] [10] [ITI-71] Get Access Token Response [Extended access token] [11] query documents with extended access token [12] query documents [ITI-67] with extended access token [13] [14] [15] retrieve document with extended access token [16] retrieve document [ITI-68] with extended access token [17] [18] [19] [20]
