SMART Permission Tickets
0.1.0 - ci-build

SMART Permission Tickets, published by . This guide is not an authorized publication; it is the continuous build for version 0.1.0 built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/jmandel/smart-permission-tickets-wip/ and changes regularly. See the Directory of published versions

Use Case Catalog

This page lists the current ticket_type registry for the seven core Permission Ticket use cases.

Use Caseticket_type URI
Use Case 1: Patient Self Accesshttps://smarthealthit.org/permission-ticket-type/patient-self-access-v1
Use Case 2: Patient-Delegated Accesshttps://smarthealthit.org/permission-ticket-type/patient-delegated-access-v1
Use Case 3: Public Health Investigationhttps://smarthealthit.org/permission-ticket-type/public-health-investigation-v1
Use Case 4: Social Care (CBO) Referralhttps://smarthealthit.org/permission-ticket-type/social-care-referral-v1
Use Case 5: Payer Claims Adjudicationhttps://smarthealthit.org/permission-ticket-type/payer-claims-adjudication-v1
Use Case 6: Research Studyhttps://smarthealthit.org/permission-ticket-type/research-study-access-v1
Use Case 7: Provider-to-Provider Consulthttps://smarthealthit.org/permission-ticket-type/provider-consult-v1

Per-Profile Constraints

The table below summarizes required and optional fields for each ticket type:

Use Case presenter_binding Requester Context Fields Access Dimensions
UC1: Patient Self Access Optional (none) permissions (required)
UC2: Patient-Delegated Access Optional RelatedPerson (required) (none) permissions (required)
UC3: Public Health Optional Organization (required) reportable_condition permissions, data_period, data_holder_filter
UC4: Social Care Optional Organization (required) concern, referral permissions
UC5: Payer Claims Optional Organization (required) service, claim permissions, data_period, data_holder_filter
UC6: Research Optional Organization (required) study permissions, data_period
UC7: Provider Consult Optional PractitionerRole (required) reason, consult_request permissions

Use Case 1: Patient Self Access

A patient uses a high-assurance Digital ID wallet to authorize an app to fetch their data from multiple hospitals.

Ticket Schema
  • Subject: Patient (matched by demographics: Name, DOB, Identifier).
  • Requester: None (self-access).
  • Context: (none; context may be omitted or empty for this ticket type).
  • Access: permissions with specific resource types and interactions.

Permission Ticket Artifact

Header
{
  "alg": "ES256",
  "kid": "nvOGRCsTz2QIQLsbl0ZQ_ux0tfyh5iave-jvNsANWv8"
}
Payload (Claims)
{
  "iss": "https://trusted-issuer.org",
  "aud": "https://network.org",
  "exp": 1775789228,
  "jti": "uc1-4b33cc1d-0f6b-44bf-bd33-80f6d7140f3e",
  "ticket_type": "https://smarthealthit.org/permission-ticket-type/patient-self-access-v1",
  "presenter_binding": {
    "method": "jkt",
    "jkt": "JuI6ibZHcMPQICaIZ55PbXpnsudQmKt00D0BiEXNrMc"
  },
  "subject": {
    "patient": {
      "resourceType": "Patient",
      "identifier": [
        {
          "system": "http://hospital.example.org/mrn",
          "value": "A12345"
        }
      ],
      "birthDate": "1989-09-14",
      "name": [
        {
          "family": "Reyes",
          "given": [
            "Elena"
          ]
        }
      ]
    }
  },
  "access": {
    "permissions": [
      {
        "kind": "data",
        "resource_type": "AllergyIntolerance",
        "interactions": [
          "read",
          "search"
        ]
      },
      {
        "kind": "data",
        "resource_type": "Condition",
        "interactions": [
          "read",
          "search"
        ]
      },
      {
        "kind": "data",
        "resource_type": "Observation",
        "interactions": [
          "read",
          "search"
        ]
      },
      {
        "kind": "data",
        "resource_type": "MedicationRequest",
        "interactions": [
          "read",
          "search"
        ]
      }
    ],
    "data_period": {
      "start": "2021-01-01",
      "end": "2026-01-01"
    }
  },
  "iat": 1775785628
}
Raw Signed JWT
eyJhbGciOiJFUzI1NiIsImtpZCI6Im52T0dSQ3NUejJRSVFMc2JsMFpRX3V4MHRmeWg1aWF2ZS1qdk5zQU5XdjgifQ.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.X0WrebS0ryzpb5oe9937LHnJ7uM5p9FLuV-i9rVHJa6Gq7bYswlYpPwg655fq7qx_-Fapfdq4NxECS3y2r04Ig

Use Case 2: Patient-Delegated Access

An adult daughter accesses her elderly mother's records. The relationship is verified by a Trusted Issuer, not the Hospital.

Ticket Schema
  • Subject: Patient (matched by demographics or identifier).
  • Requester: RelatedPerson with relationship codings expressing both personal relationship and legal authority type.
  • Context: (none; same as UC1 — delegation is expressed by the presence and type of requester)
  • Access: permissions with specific resource types and interactions.

Permission Ticket Artifact

Header
{
  "alg": "ES256",
  "kid": "nvOGRCsTz2QIQLsbl0ZQ_ux0tfyh5iave-jvNsANWv8"
}
Payload (Claims)
{
  "iss": "https://trusted-issuer.org",
  "aud": "https://network.org",
  "exp": 1775789228,
  "jti": "uc2-8c6f4ec2-4fb6-4c42-9530-6bbd11c77e49",
  "ticket_type": "https://smarthealthit.org/permission-ticket-type/patient-delegated-access-v1",
  "presenter_binding": {
    "method": "jkt",
    "jkt": "JuI6ibZHcMPQICaIZ55PbXpnsudQmKt00D0BiEXNrMc"
  },
  "subject": {
    "patient": {
      "resourceType": "Patient",
      "identifier": [
        {
          "system": "https://national-mpi.net",
          "value": "pt-555"
        }
      ],
      "birthDate": "1948-06-15",
      "name": [
        {
          "family": "Reyes",
          "given": [
            "Maria"
          ]
        }
      ]
    }
  },
  "requester": {
    "resourceType": "RelatedPerson",
    "relationship": [
      {
        "coding": [
          {
            "system": "http://terminology.hl7.org/CodeSystem/v3-RoleCode",
            "code": "DAU",
            "display": "daughter"
          }
        ]
      },
      {
        "coding": [
          {
            "system": "http://terminology.hl7.org/CodeSystem/v3-RoleCode",
            "code": "HPOWATT",
            "display": "healthcare power of attorney"
          }
        ]
      }
    ],
    "name": [
      {
        "family": "Reyes",
        "given": [
          "Elena"
        ]
      }
    ]
  },
  "access": {
    "permissions": [
      {
        "kind": "data",
        "resource_type": "Condition",
        "interactions": [
          "read",
          "search"
        ]
      },
      {
        "kind": "data",
        "resource_type": "Immunization",
        "interactions": [
          "read",
          "search"
        ]
      },
      {
        "kind": "data",
        "resource_type": "MedicationRequest",
        "interactions": [
          "read",
          "search"
        ]
      }
    ]
  },
  "iat": 1775785628
}
Raw Signed JWT
eyJhbGciOiJFUzI1NiIsImtpZCI6Im52T0dSQ3NUejJRSVFMc2JsMFpRX3V4MHRmeWg1aWF2ZS1qdk5zQU5XdjgifQ.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.jIKgBwowW5RUeO74oDN557e_rg7NeO_GYDtfbRufReTNvVIO2VoMnOyyljdvu2o1r5Lp6H0Ms8Uu1tN0czD_Vw

Use Case 3: Public Health Investigation

A Hospital creates a Case Report. The Public Health Agency (PHA) uses a ticket to query for follow-up data.

Ticket Schema
  • Subject: Patient (matched by demographics or identifier).
  • Requester: Organization (public health agency).
  • Context: reportable_condition (coded condition).
  • Access: permissions, optional data_period, data_holder_filter, sensitive_data.

Permission Ticket Artifact

Header
{
  "alg": "ES256",
  "kid": "nvOGRCsTz2QIQLsbl0ZQ_ux0tfyh5iave-jvNsANWv8"
}
Payload (Claims)
{
  "iss": "https://issuer.state.example.gov",
  "aud": "https://network.org",
  "exp": 1775957430,
  "jti": "uc3-16ff62cf-2d2d-4b30-8c86-6a13d7ab7d16",
  "ticket_type": "https://smarthealthit.org/permission-ticket-type/public-health-investigation-v1",
  "presenter_binding": {
    "method": "trust_framework_client",
    "trust_framework": "https://state.example.gov/trust-framework/public-health",
    "framework_type": "udap",
    "entity_uri": "https://state.example.gov/organizations/epi-unit"
  },
  "subject": {
    "patient": {
      "resourceType": "Patient",
      "identifier": [
        {
          "system": "http://hospital.example.org/mrn",
          "value": "M445566"
        }
      ],
      "birthDate": "1978-02-21",
      "name": [
        {
          "family": "Carter",
          "given": [
            "Monica"
          ]
        }
      ]
    }
  },
  "requester": {
    "resourceType": "Organization",
    "identifier": [
      {
        "system": "urn:ietf:rfc:3986",
        "value": "https://state.example.gov/organizations/epi-unit"
      }
    ],
    "name": "State Epidemiology Unit"
  },
  "access": {
    "permissions": [
      {
        "kind": "data",
        "resource_type": "Condition",
        "interactions": [
          "read",
          "search"
        ]
      },
      {
        "kind": "data",
        "resource_type": "Observation",
        "interactions": [
          "read",
          "search"
        ]
      },
      {
        "kind": "data",
        "resource_type": "DiagnosticReport",
        "interactions": [
          "read",
          "search"
        ]
      }
    ],
    "data_period": {
      "start": "2025-12-01",
      "end": "2026-06-01"
    },
    "data_holder_filter": [
      {
        "kind": "jurisdiction",
        "address": {
          "country": "US",
          "state": "TX"
        }
      }
    ],
    "sensitive_data": "include"
  },
  "context": {
    "reportable_condition": {
      "coding": [
        {
          "system": "http://snomed.info/sct",
          "code": "840539006",
          "display": "Disease caused by severe acute respiratory syndrome coronavirus 2 (disorder)"
        }
      ]
    }
  },
  "iat": 1775953830
}
Raw Signed JWT
eyJhbGciOiJFUzI1NiIsImtpZCI6Im52T0dSQ3NUejJRSVFMc2JsMFpRX3V4MHRmeWg1aWF2ZS1qdk5zQU5XdjgifQ.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.M_viuaqcGdIVyRfrdXaWZ6-HIFkDMEKStxbXJoz_is1CJwHKmLwbwzrGUemAqxRk99ryTjQwl5RLJVarS-GpaQ

Use Case 4: Social Care (CBO) Referral

A community-based organization needs to access referral-related data. A Food Bank volunteer needs to update a referral status.

Ticket Schema
  • Subject: Patient (matched by demographics or identifier).
  • Requester: Organization (social care hub).
  • Context: concern (coded concern), referral (ServiceRequest).
  • Access: permissions with specific resource types and interactions.

Permission Ticket Artifact

Header
{
  "alg": "ES256",
  "kid": "nvOGRCsTz2QIQLsbl0ZQ_ux0tfyh5iave-jvNsANWv8"
}
Payload (Claims)
{
  "iss": "https://issuer.example.org",
  "aud": "https://network.org",
  "exp": 1775957430,
  "jti": "uc4-0d0f7272-2d85-49ef-8c39-d4a8e8d8a7f2",
  "ticket_type": "https://smarthealthit.org/permission-ticket-type/social-care-referral-v1",
  "presenter_binding": {
    "method": "trust_framework_client",
    "trust_framework": "https://smarthealthit.org/trust-frameworks/reference-demo-well-known",
    "framework_type": "well-known",
    "entity_uri": "https://aco.example.org/entities/social-care-hub"
  },
  "subject": {
    "patient": {
      "resourceType": "Patient",
      "identifier": [
        {
          "system": "http://hospital.example.org/mrn",
          "value": "S778899"
        }
      ],
      "birthDate": "1963-11-03",
      "name": [
        {
          "family": "Nguyen",
          "given": [
            "Linh"
          ]
        }
      ]
    }
  },
  "requester": {
    "resourceType": "Organization",
    "identifier": [
      {
        "system": "urn:ietf:rfc:3986",
        "value": "https://aco.example.org/entities/social-care-hub"
      }
    ],
    "name": "Community Social Care Hub"
  },
  "access": {
    "permissions": [
      {
        "kind": "data",
        "resource_type": "ServiceRequest",
        "interactions": [
          "read",
          "search"
        ]
      },
      {
        "kind": "data",
        "resource_type": "Condition",
        "interactions": [
          "read",
          "search"
        ]
      },
      {
        "kind": "data",
        "resource_type": "Observation",
        "interactions": [
          "read",
          "search"
        ]
      }
    ],
    "sensitive_data": "exclude"
  },
  "context": {
    "concern": {
      "coding": [
        {
          "system": "http://snomed.info/sct",
          "code": "733423003",
          "display": "Food insecurity"
        }
      ]
    },
    "referral": {
      "resourceType": "ServiceRequest",
      "identifier": [
        {
          "system": "http://issuer.example.org/referrals",
          "value": "REF-1001"
        }
      ],
      "status": "active",
      "intent": "order"
    }
  },
  "iat": 1775953830
}
Raw Signed JWT
eyJhbGciOiJFUzI1NiIsImtpZCI6Im52T0dSQ3NUejJRSVFMc2JsMFpRX3V4MHRmeWg1aWF2ZS1qdk5zQU5XdjgifQ.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.p4czU9oGIwMBDSDArUHBAcpRBflM3EW1paJrXkwEFlmY-psK8zUW2bP5U4xdcn_F-khBM27q4PgvF79Uwyd2IQ

Use Case 5: Payer Claims Adjudication

A Payer requests clinical documents to support a specific claim.

Ticket Schema
  • Subject: Patient (matched by demographics or identifier).
  • Requester: Organization (Payer).
  • Context: service (coded service), claim (Claim resource).
  • Access: permissions, optional data_period, data_holder_filter.

Permission Ticket Artifact

Header
{
  "alg": "ES256",
  "kid": "nvOGRCsTz2QIQLsbl0ZQ_ux0tfyh5iave-jvNsANWv8"
}
Payload (Claims)
{
  "iss": "https://issuer.example.org",
  "aud": "https://network.org",
  "exp": 1775957430,
  "jti": "uc5-9096d8d2-3627-45ee-8ea2-5e5a0ab51b7b",
  "ticket_type": "https://smarthealthit.org/permission-ticket-type/payer-claims-adjudication-v1",
  "presenter_binding": {
    "method": "trust_framework_client",
    "trust_framework": "https://payer.example.org/trust-framework",
    "framework_type": "udap",
    "entity_uri": "https://payer.example.org/entities/claims-ops"
  },
  "subject": {
    "patient": {
      "resourceType": "Patient",
      "identifier": [
        {
          "system": "http://hospital.example.org/mrn",
          "value": "C112233"
        }
      ],
      "birthDate": "1954-07-19",
      "name": [
        {
          "family": "Johnson",
          "given": [
            "Amelia"
          ]
        }
      ]
    }
  },
  "requester": {
    "resourceType": "Organization",
    "identifier": [
      {
        "system": "urn:ietf:rfc:3986",
        "value": "https://payer.example.org/entities/claims-ops"
      }
    ],
    "name": "Acme Health Plan Claims Operations"
  },
  "access": {
    "permissions": [
      {
        "kind": "data",
        "resource_type": "Claim",
        "interactions": [
          "read",
          "search"
        ]
      },
      {
        "kind": "data",
        "resource_type": "ExplanationOfBenefit",
        "interactions": [
          "read",
          "search"
        ]
      },
      {
        "kind": "data",
        "resource_type": "DocumentReference",
        "interactions": [
          "read",
          "search"
        ]
      }
    ],
    "data_period": {
      "start": "2025-01-01",
      "end": "2025-12-31"
    },
    "data_holder_filter": [
      {
        "kind": "organization",
        "organization": {
          "resourceType": "Organization",
          "identifier": [
            {
              "system": "http://hl7.org/fhir/sid/us-npi",
              "value": "1234567893"
            }
          ],
          "name": "General Hospital"
        }
      }
    ],
    "sensitive_data": "exclude"
  },
  "context": {
    "service": {
      "coding": [
        {
          "system": "http://www.ama-assn.org/go/cpt",
          "code": "99214",
          "display": "Office or other outpatient visit"
        }
      ]
    },
    "claim": {
      "resourceType": "Claim",
      "identifier": [
        {
          "system": "http://payer.example.org/claims",
          "value": "CLM-884422"
        }
      ],
      "status": "active",
      "use": "claim"
    }
  },
  "iat": 1775953830
}
Raw Signed JWT
eyJhbGciOiJFUzI1NiIsImtpZCI6Im52T0dSQ3NUejJRSVFMc2JsMFpRX3V4MHRmeWg1aWF2ZS1qdk5zQU5XdjgifQ.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.a4OMMFopHxQtx6Kc-RG3o4ArLFUoWCypunkURdTfidcPYtKMD4qMiMLdjtwWCy63w-GO3f5SinG9_GPrsuJFjg

Use Case 6: Research Study

A patient consents to a study. The ticket proves consent exists without requiring the researcher to be a "user" at the hospital.

Ticket Schema
  • Subject: Patient (matched by demographics or identifier).
  • Requester: Organization (research institute).
  • Context: study (ResearchStudy resource).
  • Access: permissions, optional data_period, sensitive_data.

Permission Ticket Artifact

Header
{
  "alg": "ES256",
  "kid": "nvOGRCsTz2QIQLsbl0ZQ_ux0tfyh5iave-jvNsANWv8"
}
Payload (Claims)
{
  "iss": "https://issuer.example.org",
  "aud": "https://network.org",
  "exp": 1775957430,
  "jti": "uc6-b5774e14-a020-46f2-94d3-2bb95b7ac4af",
  "ticket_type": "https://smarthealthit.org/permission-ticket-type/research-study-access-v1",
  "presenter_binding": {
    "method": "trust_framework_client",
    "trust_framework": "https://research.example.org/trust-framework",
    "framework_type": "udap",
    "entity_uri": "https://research.example.org/entities/study-team-204"
  },
  "subject": {
    "patient": {
      "resourceType": "Patient",
      "identifier": [
        {
          "system": "http://hospital.example.org/mrn",
          "value": "R445500"
        }
      ],
      "birthDate": "1970-05-30",
      "name": [
        {
          "family": "Lopez",
          "given": [
            "Marina"
          ]
        }
      ]
    }
  },
  "requester": {
    "resourceType": "Organization",
    "identifier": [
      {
        "system": "urn:ietf:rfc:3986",
        "value": "https://research.example.org/entities/study-team-204"
      }
    ],
    "name": "Study Team 204"
  },
  "access": {
    "permissions": [
      {
        "kind": "data",
        "resource_type": "Condition",
        "interactions": [
          "read",
          "search"
        ]
      },
      {
        "kind": "data",
        "resource_type": "Observation",
        "interactions": [
          "read",
          "search"
        ]
      }
    ],
    "data_period": {
      "start": "2024-01-01",
      "end": "2026-12-31"
    },
    "sensitive_data": "exclude"
  },
  "context": {
    "study": {
      "resourceType": "ResearchStudy",
      "identifier": [
        {
          "system": "http://research.example.org/studies",
          "value": "STUDY-204"
        }
      ],
      "status": "active",
      "title": "Diabetes Outcomes Registry"
    }
  },
  "iat": 1775953830
}
Raw Signed JWT
eyJhbGciOiJFUzI1NiIsImtpZCI6Im52T0dSQ3NUejJRSVFMc2JsMFpRX3V4MHRmeWg1aWF2ZS1qdk5zQU5XdjgifQ.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.oViHUuZP1BxzbXoApdK4g4PrOhKKGBh2p4NkA5BZnkzhTmbbdnj3bgPCS9A0KOgH_lJJsk7gmWlVrbBCKYSJNg

Use Case 7: Provider-to-Provider Consult

A Specialist (Practitioner) requests data from a Referring Provider.

Ticket Schema
  • Subject: Patient (matched by demographics or identifier).
  • Requester: PractitionerRole (specialist role).
  • Context: reason (coded reason), consult_request (ServiceRequest).
  • Access: permissions with specific resource types and interactions.

Permission Ticket Artifact

Header
{
  "alg": "ES256",
  "kid": "nvOGRCsTz2QIQLsbl0ZQ_ux0tfyh5iave-jvNsANWv8"
}
Payload (Claims)
{
  "iss": "https://issuer.example.org",
  "aud": "https://network.org",
  "exp": 1775957430,
  "jti": "uc7-d6927f7f-74c8-4b1b-a7a5-7f4e6d99390a",
  "ticket_type": "https://smarthealthit.org/permission-ticket-type/provider-consult-v1",
  "presenter_binding": {
    "method": "trust_framework_client",
    "trust_framework": "https://smarthealthit.org/trust-frameworks/reference-demo-well-known",
    "framework_type": "well-known",
    "entity_uri": "https://hospital.example.org/entities/cardiology-group"
  },
  "subject": {
    "patient": {
      "resourceType": "Patient",
      "identifier": [
        {
          "system": "http://hospital.example.org/mrn",
          "value": "K667788"
        }
      ],
      "birthDate": "1981-03-08",
      "name": [
        {
          "family": "Thomas",
          "given": [
            "Jared"
          ]
        }
      ]
    }
  },
  "requester": {
    "resourceType": "PractitionerRole",
    "code": [
      {
        "coding": [
          {
            "system": "http://snomed.info/sct",
            "code": "17561000",
            "display": "Cardiologist"
          }
        ]
      }
    ]
  },
  "access": {
    "permissions": [
      {
        "kind": "data",
        "resource_type": "Condition",
        "interactions": [
          "read",
          "search"
        ]
      },
      {
        "kind": "data",
        "resource_type": "Observation",
        "interactions": [
          "read",
          "search"
        ]
      },
      {
        "kind": "data",
        "resource_type": "DiagnosticReport",
        "interactions": [
          "read",
          "search"
        ]
      }
    ],
    "sensitive_data": "exclude"
  },
  "context": {
    "reason": {
      "coding": [
        {
          "system": "http://snomed.info/sct",
          "code": "53741008",
          "display": "Coronary arteriosclerosis"
        }
      ]
    },
    "consult_request": {
      "resourceType": "ServiceRequest",
      "identifier": [
        {
          "system": "http://issuer.example.org/consults",
          "value": "CONSULT-7788"
        }
      ],
      "status": "active",
      "intent": "order"
    }
  },
  "iat": 1775953830
}
Raw Signed JWT
eyJhbGciOiJFUzI1NiIsImtpZCI6Im52T0dSQ3NUejJRSVFMc2JsMFpRX3V4MHRmeWg1aWF2ZS1qdk5zQU5XdjgifQ.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.Dbbb12BtN3CN12KaApwmPZkCs_1xNkuHgfs9xl1kFqAl2gyICv9RHPfH7EEVy2oZV0jFRQcMx0tmsGDTGFHPSQ