ITI-43 ATNA message not valid

[Schmid Dominik]

Hi

 

I got the following validation errors when I wanted to validate the atna message for retrieve document:

https://ehealthsuisse.ihe-europe.net/EVSClient//detailedResult.seam?type=ATNA&oid=1.3.6.1.4.1.12559.11.25.1.13.24256

 

I tried with ipf 3.5.4

 

Thank you

Dominik

[Christian Ohr]

Hi,

two issues here:

Test

every $partid in /AuditMessage/ParticipantObjectIdentification[@ParticipantObjectTypeCode='2' and @ParticipantObjectTypeCodeRole='3'] satisfies $partid/@ParticipantObjectSensitivityE - 2

Description

Document/@ParticipantObjectSensitivity is mandatory ( IHE IT Infrastructure Technical Framework, Volume 2b (ITI TF-2b): Transactions Part B , 3.43.6.1.1 )

--> Nothing in the ITI-43 Audit Spec indicates that ParticipantObjectSensitivity is mandatory. It is optional by default, and ITI-43 doesn't say anything different. IMO this is a bug in the Validator.

Test

every $actpart in /AuditMessage/ActiveParticipant[RoleIDCode[@csd-code='110152']] satisfies $actpart/@AlternativeUserIDE - 1

Description

Destination/@AlternativeUserID is mandatory ( IHE IT Infrastructure Technical Framework, Volume 2b (ITI TF-2b): Transactions Part B , 3.43.6.1.1 )

--> The ITI-43 Security specification defines that the source (consumer) is responsible for auditing the process ID of the destination (repository), which is obviously impossible. In fact I think it has simply mixed up. I filed a Change Proposal about a year ago (CP-ITI-1104, see ftp://ftp.ihe.net/IT_Infrastructure/CPs/1_Assigned/CP-ITI-1104-00.doc) that intends to correct this, but it has not processed so far. Maybe the validator could also relax this rule. Otherwise, the best that could be done is to enter "unknown" as AlternativeUserID.

regards

Christian

--
You received this message because you are subscribed to the Google Groups "ipf-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ipf-dev+u...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Schmid Dominik]

Hi Christian

 

Thank you very much for the clarification :).

 

Cheers

Dominik