T06 — SMART on FHIR — Safe future of digi­tal medicine?

Day, Time, Duration

Sunday after­noon, 2–4 pm, 4h

Langue Offer­ered 

German

Short Descrip­tion

Priva­cy, secu­ri­ty and inter­op­er­abil­i­ty are essen­tial require­ments for health­care appli­ca­tions. The SMART on FHIR stan­dard has set out to meet these require­ments as a free and open standard.

In this tuto­r­i­al, SMART on FHIR will be exam­ined both on the inte­gra­tion level and from a tech­ni­cal perspec­tive. The aim is to raise aware­ness of this promis­ing stan­dard in the German-speaking commu­ni­ty, to high­light the hurdles to imple­men­ta­tion, and to lay the foun­da­tion for inte­gra­tion in the near future. There are many indi­ca­tions that SMART on FHIR will also find its way into Europe and Germany in the medi­um term follow­ing its success in the USA. It is there­fore impor­tant that people in the medical context are famil­iar with the stan­dard and, with the appro­pri­ate know-how, can drive the inte­gra­tion forward quick­ly and effi­cient­ly. Up to now, there has been little docu­men­ta­tion on how to ensure secure imple­men­ta­tion and oper­a­tion in the medical context. This is where this tuto­r­i­al comes in. The infor­ma­tion is espe­cial­ly aimed at people who are not yet famil­iar with SMART on FHIR or who have little expe­ri­ence with it. A special focus is placed on the secu­ri­ty of appli­ca­tions that use the SMART on FHIR stan­dard. The tuto­r­i­al is divid­ed into two phas­es: (1) joint devel­op­ment of the basics and (2) prac­ti­cal imple­men­ta­tion of SMART on FHIR. In the first step, the concept is intro­duced in more detail so that partic­i­pants get a better overview. This includes, for exam­ple, the differ­ence between the clas­sic approach, in which appli­ca­tions are purchased and installed direct­ly in the hospi­tal context, and the novel “plug’n’play” prin­ci­ple of SMART on FHIR. In the course of this, possi­ble orga­ni­za­tion­al prob­lems in the inte­gra­tion of SMART on FHIR will also be consid­ered togeth­er with the partic­i­pants. In the next step, the tech­ni­cal basics (proto­col flow) of the stan­dard will be present­ed. The secu­ri­ty level — which SMART on FHIR promis­es — will also be eval­u­at­ed togeth­er with the partic­i­pants. Only with this knowl­edge can secure appli­ca­tions be real­ized with the SMART on FHIR stan­dard in the future. The intro­duc­to­ry phase is followed by prac­ti­cal imple­men­ta­tion. First, freely avail­able appli­ca­tions are exam­ined in more detail and their func­tion­al­i­ty is analyzed. Appli­ca­tions from the offi­cial SMART App Gallery are used for this purpose. The final task is for the partic­i­pants them­selves to create an appli­ca­tion that can request and process medical data from a simu­lat­ed medical facil­i­ty. No in-depth program­ming knowl­edge is required for this. Depend­ing on their level of knowl­edge, the partic­i­pants can decide whether they want to devel­op the appli­ca­tion complete­ly them­selves or inte­grate prefab­ri­cat­ed sample apps. The use of their own termi­nal device is required to complete the last task.

Subject Require­ments

Basic knowl­edge in the areas of networks, HTTP and REST

Tech­ni­cal requirements

Own laptop (soft­ware can be installed on site). Option­al­ly, the soft­ware “Burp­suite” (https://portswigger.net/burp/communitydownload) can already be installed if the proto­col process itself is to be traced.

Organ­isator

Maxi­m­il­ian Westers

Insti­tu­tion

Heil­bronn Univer­si­ty, Heilbronn

Contact

maximilian.westers [at] hs-heilbronn.de

Addi­tion­al Speaker

Prof. Dr. Andreas Mayer

Insti­tu­tion

Heil­bronn Univer­si­ty, Heilbronn