1. Single Sign-On for Professionals & Patients Phil Stradling

2. Best use of web service standards In particular: –WS-Security and WS-Trust that are already in use in government. –WS-Federation for single sign-on. –WS-Addressing and WS-ReliableMessaging for messaging across the NHS estate.

3. HL7 Web Service Profiles Submitted to ballot process last month First review by HL7 UK next week 3 draft profiles submitted for: –WS-Addressing –WS-Security –WS-ReliableMessaging Build on basic profile for SOAP

4. Federated Identity Management Enable each organization to: –Act as an authority for the identities it manages –Make verifiable assertions about those identities Build bridges of trust between “organizational islands” so they: –Choose whom they trust –Control how much they trust –Manage only their own internal identities –Use their own internal protocols Standards-based technology & processes to enable identification, authentication, and authorization across organizational and platform boundaries

5. LSP DMZ MHS Integration Hub Federation Server Directory Secure Connection Logon Transact SAML token MHS Maternity Radiology PAS MHS Spine Web Apps Message = HL7 Schema + HL7 WS Headers NHS Net Internal Network Trust HL7 v2 / v3 Dir CA SSB Web Apps Professional Logical SSO Architecture

6. LSP DMZ Indigo Biztalk ADFS AD ISA Logon Transact SAML token MHS Maternity Radiology PAS MHS Spine Web Apps Message = HL7 Schema + HL7 WS Headers NHS Net Internal Network Trust HL7 v2 / v3 Dir CA SSB Web Apps Professiona l Product Mapping

7. LSP Government Gateway Transaction Engine (MHS) A&A Secure Conex Logon View/Transact SAML token MHS NHS Direct Healthspace Care Pathways GP MHS Spine Web Apps Messages = HL7 Schema + HL7 WS Headers Internet/ NHS Net Patient facing sites, eg: Patient E-Services using Government Gateway Patient Access to NASP & LSP web services