Difference between revisions of "Patient Credential"
From MgmtWiki
(→Context) |
(→Context) |
||
| Line 3: | Line 3: | ||
==Context== | ==Context== | ||
* When a patient has gone through [Identity Proofing]] and is "known to the practice", the [[Patient Credential]] can be installed on the patient's [[Device]] to allow IAL2 level of assurance authentication to access their [[PHI]] at the [[EHR]]. | * When a patient has gone through [Identity Proofing]] and is "known to the practice", the [[Patient Credential]] can be installed on the patient's [[Device]] to allow IAL2 level of assurance authentication to access their [[PHI]] at the [[EHR]]. | ||
| − | * Note that the [[Identifier]] of the issuer will be the practice, but the [[Identifier]] of the [[Data Controller]] of the [[EHR]] may be different. | + | * Note that the [[Identifier]] of the issuer will be the practice, but the [[Identifier]] of the [[Data Controller]] of the [[EHR]] may be different. It is required that the two [[Identifier]]s are both part of the same [[Trust Anchor]] so that the patient (or guardian) will trust one because of the trust of the other. |
==Format== | ==Format== | ||
Revision as of 18:16, 6 July 2019
Contents
Full Title
The format of the document sent from a Identity Proofing Credential Service Provider to the device where the credential is stored.
Context
- When a patient has gone through [Identity Proofing]] and is "known to the practice", the Patient Credential can be installed on the patient's Device to allow IAL2 level of assurance authentication to access their PHI at the EHR.
- Note that the Identifier of the issuer will be the practice, but the Identifier of the Data Controller of the EHR may be different. It is required that the two Identifiers are both part of the same Trust Anchor so that the patient (or guardian) will trust one because of the trust of the other.
Format
Example of a JWT payload of a JWT-based verifiable Patient Credential using JWS as a proof
{
"sub": "did:example:ebfeb1f712ebc6f1c276e12ec21",
"jti": "http://example.edu/credentials/3732",
"iss": "did:example:abfe13f712120431c276e12ecab",
"iat": "1541493724",
"exp": "1573029723",
"nonce": "660!6345FSer",
"vc": {
"@context": [
"https://www.w3.org/2018/credentials/v1",
"https://www.w3.org/2018/credentials/examples/v1"
],
"type": ["PatientCredential", "IAL2"],
"credentialSubject": {
"degree": {
"type": "known_to_the_practice",
"name": "<span lang='fr-CA'>Baccalauréat</span>"
}
}
}
}
