|
HAPI and SSL
Is anyone using HAPI with SSL?
Thanks,
Mike
------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf_______________________________________________
Hl7api-devel mailing list
Hl7api-devel@...
https://lists.sourceforge.net/lists/listinfo/hl7api-devel
|
|
Re: HAPI and SSL
I'm just getting inside HL7 for the hospital where I work, and for now I have considered using a web service as a wrapper (String method(String)) for hl7 messages and apply security at web service level using axis2, WS security, SSL, but I wonder what is the best solution, for clients and servers talking HL7...
On Fri, Oct 2, 2009 at 11:37 AM, Mike DiChiappari <mdichiappari@...> wrote:
Is anyone using HAPI with SSL?
Thanks,
Mike
------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
_______________________________________________
Hl7api-devel mailing list
Hl7api-devel@...
https://lists.sourceforge.net/lists/listinfo/hl7api-devel
-- Jaime Hablutzel (tildes omitidas intencionalmente) 9 8964 0369
------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf_______________________________________________
Hl7api-devel mailing list
Hl7api-devel@...
https://lists.sourceforge.net/lists/listinfo/hl7api-devel
|
|
Re: HAPI and SSL
We looked into that but external systems we are exchanging messages do
not support ssl.
So we decided to use either Site-to-Site VPN or have our own message
queue component at the client site and in that case exchange message
via ssl.
Check out how Mirth is doing it using their appliance model.
In other words you could "guarantee" somehow a secure transfer of
messages between two networks and then use a plaintext message
exchange within secure environments.
We had to write a separate module for that but various message queue
systems can be used as well.
I guess I tried to explain why you would not see a lot of "yes"
answers to your question. I suspect it is because vendors of existing
clinical systems do not support ssl for HL7 exchange and not because
it can not be done within HAPI api.
Peter
On Oct 2, 2009, at 12:37 PM, Mike DiChiappari wrote:
> Is anyone using HAPI with SSL?
>
> Thanks,
> Mike
>
> ------------------------------------------------------------------------------
> Come build with us! The BlackBerry® Developer Conference in SF, CA
> is the only developer event you need to attend this year. Jumpstart
> your
> developing skills, take BlackBerry mobile applications to market and
> stay
> ahead of the curve. Join us from November 9-12, 2009. Register
> now!
> http://p.sf.net/sfu/devconf> _______________________________________________
> Hl7api-devel mailing list
> Hl7api-devel@...
> https://lists.sourceforge.net/lists/listinfo/hl7api-devel>
------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf_______________________________________________
Hl7api-devel mailing list
Hl7api-devel@...
https://lists.sourceforge.net/lists/listinfo/hl7api-devel
|
|
Re: HAPI and SSL
Some parts of this message have been removed.
Learn more about Nabble's security policy.
Hi Jamie,
We do the same thing, we have designed a
series of web service wrappers over the HL7 messages and events, it is at this
level that we apply security which includes WS-Security and SSL, this will
become part of the published standard in Australia.
Regards
Shirren
----- Original Message -----
Sent: Saturday, October 03, 2009 6:37
AM
Subject: Re: [HAPI-devel] HAPI and
SSL
I'm just getting inside HL7 for the hospital where I work, and
for now I have considered using a web service as a wrapper (String
method(String)) for hl7 messages and apply security at web service level using
axis2, WS security, SSL, but I wonder what is the best solution, for clients
and servers talking HL7...
On Fri, Oct 2, 2009 at 11:37 AM, Mike DiChiappari <mdichiappari@...>
wrote:
Is anyone using HAPI with
SSL?
Thanks,
Mike
------------------------------------------------------------------------------
Come
build with us! The BlackBerry® Developer Conference in SF, CA
is
the only developer event you need to attend this year. Jumpstart
your
developing skills, take BlackBerry mobile applications to market and
stay
ahead of the curve. Join us from November 9-12, 2009.
Register now!
http://p.sf.net/sfu/devconf
_______________________________________________
Hl7api-devel
mailing list
Hl7api-devel@...
https://lists.sourceforge.net/lists/listinfo/hl7api-devel
--
Jaime Hablutzel
(tildes omitidas intencionalmente)
9 8964 0369
------------------------------------------------------------------------------
Come
build with us! The BlackBerry® Developer Conference in SF, CA
is
the only developer event you need to attend this year. Jumpstart
your
developing skills, take BlackBerry mobile applications to market and
stay
ahead of the curve. Join us from November 9-12, 2009.
Register now!
http://p.sf.net/sfu/devconf
_______________________________________________
Hl7api-devel mailing
list
Hl7api-devel@...
https://lists.sourceforge.net/lists/listinfo/hl7api-devel
------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf_______________________________________________
Hl7api-devel mailing list
Hl7api-devel@...
https://lists.sourceforge.net/lists/listinfo/hl7api-devel
|
|
 Fwd: HAPI and SSL
I can realize that some of you are using web services for message transportation, but... is this the best?? doesn't it add an unnecesary level of complexity? I can realize that HAPI has a message transport implementation. I would like to know all alternatives before getting into production at the hospital I work for 1
1. www.hndac.gob.pe On Sat, Oct 3, 2009 at 1:46 PM, Erik Gfesser <erik_gfesser@...> wrote:
Please note that the WS-Security standard covers message layer security, while SSL (actually TLS) covers transport layer security. The former encrypts individual messages as they are sent across the wire, while the latter encrypts all messages sent across the wire. The type of security implemented will depend on your needs; it's not necessarily required to implement both types of security.
Thanks, Erik
--- On Sat, 10/3/09, Shirren <shirren.premaratne@...> wrote:
> From: Shirren <shirren.premaratne@...>
> Subject: Re: [HAPI-devel] HAPI and SSL
> To: "Jaime Hablutzel Egoavil" <hablutzel1@...>, hl7api-devel@...
> Date: Saturday, October 3, 2009, 8:25 AM
>
>
>
>
>
>
>
> Hi Jamie,
>
> We do the same
> thing, we have designed a
> series of web service wrappers over the HL7 messages and
> events, it is at this > level that we apply security which includes WS-Security and > SSL, this will > become part of the published standard in > Australia. > > Regards > Shirren
> > ----- Original Message > ----- > From: > Jaime > Hablutzel Egoavil > To: hl7api-devel@...
>
> > Sent: Saturday, > October 03, 2009 6:37 > AM > Subject: Re: > [HAPI-devel] HAPI and > SSL > > I'm just getting inside HL7 for the hospital > where I work, and
> for now I have considered using a web service as a > wrapper (String > method(String)) for hl7 messages and apply security at > web service level using > axis2, WS security, SSL, but I wonder what is the best
> solution, for clients > and servers talking HL7... > > > On Fri, Oct 2, 2009 at 11:37 AM, > Mike DiChiappari < mdichiappari@...>
>
> wrote:
>
> Is anyone using HAPI with
> SSL?
>
> Thanks,
> Mike
>
> ------------------------------------------------------------------------------
> Come
> build with us! The BlackBerry® Developer
> Conference in SF, CA
> is
> the only developer event you need to attend this year.
> Jumpstart
> your
> developing skills, take BlackBerry mobile applications to
> market and
> stay
> ahead of the curve. Join us from November 9-12,
> 2009.
> Register now!
> build with us! The BlackBerry® Developer
> Conference in SF, CA
> is
> the only developer event you need to attend this year.
> Jumpstart
> your
> developing skills, take BlackBerry mobile applications to
> market and
> stay
> ahead of the curve. Join us from November 9-12,
> 2009.
> Register now!
> -----Inline Attachment Follows-----
>
> ------------------------------------------------------------------------------
> Come build with us! The BlackBerry® Developer
> Conference in SF, CA
> is the only developer event you need to attend this year.
> Jumpstart your
> developing skills, take BlackBerry mobile applications to
> market and stay
> ahead of the curve. Join us from November 9-12, 2009.
> Register now!
> -----Inline Attachment Follows-----
-- Jaime Hablutzel (tildes omitidas intencionalmente) 9 8964 0369
------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf_______________________________________________
Hl7api-devel mailing list
Hl7api-devel@...
https://lists.sourceforge.net/lists/listinfo/hl7api-devel
|
|
Re: Fwd: HAPI and SSL
Some parts of this message have been removed.
Learn more about Nabble's security policy.
There is a choice for you to excersize..implement ServerSocket
call into SSL socket . This is in TransportLayer domains.
Have a look at it.
From: Jaime Hablutzel
Egoavil [mailto:hablutzel1@...]
Sent: Monday, October 05, 2009 10:34 PM
To: hl7api-devel@...
Subject: [HAPI-devel] Fwd: HAPI and SSL
I can realize that some of you are using web services for
message transportation, but... is this the best??
doesn't it add an unnecesary level of complexity? I can realize that HAPI has a
message transport implementation. I would like to know all alternatives before
getting into production at the hospital I work for 1
1. www.hndac.gob.pe
On Sat, Oct 3, 2009 at 1:46 PM, Erik Gfesser <erik_gfesser@...>
wrote:
Please note that the WS-Security standard covers message
layer security, while SSL (actually TLS) covers transport layer security. The
former encrypts individual messages as they are sent across the wire, while the
latter encrypts all messages sent across the wire. The type of security
implemented will depend on your needs; it's not necessarily required to
implement both types of security.
Thanks, Erik
--- On Sat, 10/3/09, Shirren <shirren.premaratne@...> wrote:
> From: Shirren <shirren.premaratne@...>
> Subject: Re: [HAPI-devel] HAPI and SSL
> To: "Jaime Hablutzel Egoavil" <hablutzel1@...>,
hl7api-devel@...
> Date: Saturday, October 3, 2009, 8:25 AM
>
>
>
>
>
>
>
> Hi Jamie,
>
> We do the same
> thing, we have designed a
> series of web service wrappers over the HL7 messages and
> events, it is at this
> level that we apply security which includes WS-Security and
> SSL, this will
> become part of the published standard in
> Australia.
>
> Regards
> Shirren
>
> ----- Original Message
> -----
> From:
> Jaime
> Hablutzel Egoavil
> To: hl7api-devel@...
>
>
> Sent: Saturday,
> October 03, 2009 6:37
> AM
> Subject: Re:
> [HAPI-devel] HAPI and
> SSL
>
> I'm just getting inside HL7 for the hospital
> where I work, and
> for now I have considered using a web service as a
> wrapper (String
> method(String)) for hl7 messages and apply security at
> web service level using
> axis2, WS security, SSL, but I wonder what is the best
> solution, for clients
> and servers talking HL7...
>
>
> On Fri, Oct 2, 2009 at 11:37 AM,
> Mike DiChiappari <mdichiappari@...>
>
> wrote:
>
> Is anyone using HAPI with
> SSL?
>
> Thanks,
> Mike
>
>
------------------------------------------------------------------------------
> Come
> build with us! The BlackBerry®
Developer
> Conference in SF, CA
> is
> the only developer event you need to attend this year.
> Jumpstart
> your
> developing skills, take BlackBerry mobile applications to
> market and
> stay
> ahead of the curve. Join us from November 9-12,
> 2009.
> Register now!
> build with us! The BlackBerry® Developer
> Conference in SF, CA
> is
> the only developer event you need to attend this year.
> Jumpstart
> your
> developing skills, take BlackBerry mobile applications to
> market and
> stay
> ahead of the curve. Join us from November 9-12,
> 2009.
> Register now!
> -----Inline Attachment Follows-----
>
>
------------------------------------------------------------------------------
> Come build with us! The BlackBerry® Developer
> Conference in SF, CA
> is the only developer event you need to attend this year.
> Jumpstart your
> developing skills, take BlackBerry mobile applications to
> market and stay
> ahead of the curve. Join us from November 9-12, 2009.
> Register now!
> -----Inline Attachment Follows-----
--
Jaime Hablutzel
(tildes omitidas intencionalmente) 9 8964 0369
------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf_______________________________________________
Hl7api-devel mailing list
Hl7api-devel@...
https://lists.sourceforge.net/lists/listinfo/hl7api-devel
|
|
Re: Fwd: HAPI and SSL
thank you Niranjan, but what facities can I use to implement user authorization? is the a hl7 specific message to manage authentication? regards. On Tue, Oct 6, 2009 at 2:09 PM, Sharma, Niranjan K (GE Healthcare) <niranjan.sharma@...> wrote:
There is a choice for you to excersize..implement ServerSocket
call into SSL socket . This is in TransportLayer domains.
Have a look at it.
From: Jaime Hablutzel
Egoavil [mailto:hablutzel1@...]
Sent: Monday, October 05, 2009 10:34 PMSubject: [HAPI-devel] Fwd: HAPI and SSL
I can realize that some of you are using web services for
message transportation, but... is this the best??
doesn't it add an unnecesary level of complexity? I can realize that HAPI has a
message transport implementation. I would like to know all alternatives before
getting into production at the hospital I work for 1
1. www.hndac.gob.pe
On Sat, Oct 3, 2009 at 1:46 PM, Erik Gfesser <erik_gfesser@...>
wrote:
Please note that the WS-Security standard covers message
layer security, while SSL (actually TLS) covers transport layer security. The
former encrypts individual messages as they are sent across the wire, while the
latter encrypts all messages sent across the wire. The type of security
implemented will depend on your needs; it's not necessarily required to
implement both types of security.
Thanks, Erik
--- On Sat, 10/3/09, Shirren <shirren.premaratne@...> wrote:
> From: Shirren <shirren.premaratne@...>
> Subject: Re: [HAPI-devel] HAPI and SSL
> To: "Jaime Hablutzel Egoavil" <hablutzel1@...>,
hl7api-devel@...
> Date: Saturday, October 3, 2009, 8:25 AM
>
>
>
>
>
>
>
> Hi Jamie,
>
> We do the same
> thing, we have designed a
> series of web service wrappers over the HL7 messages and
> events, it is at this
> level that we apply security which includes WS-Security and
> SSL, this will
> become part of the published standard in
> Australia.
>
> Regards
> Shirren
>
> ----- Original Message
> -----
> From:
> Jaime
> Hablutzel Egoavil
> To: hl7api-devel@...
>
>
> Sent: Saturday,
> October 03, 2009 6:37
> AM
> Subject: Re:
> [HAPI-devel] HAPI and
> SSL
>
> I'm just getting inside HL7 for the hospital
> where I work, and
> for now I have considered using a web service as a
> wrapper (String
> method(String)) for hl7 messages and apply security at
> web service level using
> axis2, WS security, SSL, but I wonder what is the best
> solution, for clients
> and servers talking HL7...
>
>
> On Fri, Oct 2, 2009 at 11:37 AM,
> Mike DiChiappari <mdichiappari@...>
>
> wrote:
>
> Is anyone using HAPI with
> SSL?
>
> Thanks,
> Mike
>
>
------------------------------------------------------------------------------
> Come
> build with us! The BlackBerry®
Developer
> Conference in SF, CA
> is
> the only developer event you need to attend this year.
> Jumpstart
> your
> developing skills, take BlackBerry mobile applications to
> market and
> stay
> ahead of the curve. Join us from November 9-12,
> 2009.
> Register now!
> build with us! The BlackBerry® Developer
> Conference in SF, CA
> is
> the only developer event you need to attend this year.
> Jumpstart
> your
> developing skills, take BlackBerry mobile applications to
> market and
> stay
> ahead of the curve. Join us from November 9-12,
> 2009.
> Register now!
> -----Inline Attachment Follows-----
>
>
------------------------------------------------------------------------------
> Come build with us! The BlackBerry® Developer
> Conference in SF, CA
> is the only developer event you need to attend this year.
> Jumpstart your
> developing skills, take BlackBerry mobile applications to
> market and stay
> ahead of the curve. Join us from November 9-12, 2009.
> Register now!
> -----Inline Attachment Follows-----
--
Jaime Hablutzel
(tildes omitidas intencionalmente) 9 8964 0369
-- Jaime Hablutzel (tildes omitidas intencionalmente) 9 8964 0369
------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference_______________________________________________
Hl7api-devel mailing list
Hl7api-devel@...
https://lists.sourceforge.net/lists/listinfo/hl7api-devel
|
|
Re: Fwd: HAPI and SSL
Some parts of this message have been removed.
Learn more about Nabble's security policy.
You need to hook up your SSL sockets to an access management
engine..like this http://www.sun.com/software/products/opensso_enterprise/index.xml
Hope this makes sense?
Thanks.
Regards
-Niranjan.
From: Jaime Hablutzel
Egoavil [mailto:hablutzel1@...]
Sent: Tuesday, October 06, 2009 1:47 PM
To: hl7api-devel@...
Subject: Re: [HAPI-devel] Fwd: HAPI and SSL
thank you Niranjan, but what
facities can I use to implement user authorization? is the a hl7 specific
message to manage authentication?
regards.
On Tue, Oct 6, 2009 at 2:09 PM, Sharma, Niranjan K (GE
Healthcare) <niranjan.sharma@...>
wrote:
There is a choice for you to
excersize..implement ServerSocket call into SSL socket . This is in
TransportLayer domains.
Have a look at it.
From: Jaime Hablutzel Egoavil [mailto:hablutzel1@...]
Sent: Monday, October 05, 2009 10:34 PM
Subject: [HAPI-devel] Fwd: HAPI and SSL
I can realize that some of you are using web services for message
transportation, but... is this the best??
doesn't it add an unnecesary level of complexity? I can realize that HAPI has a
message transport implementation. I would like to know all alternatives before
getting into production at the hospital I work for 1
1. www.hndac.gob.pe
On Sat, Oct 3, 2009 at 1:46 PM, Erik Gfesser <erik_gfesser@...>
wrote:
Please note that the WS-Security standard covers message layer security,
while SSL (actually TLS) covers transport layer security. The former encrypts
individual messages as they are sent across the wire, while the latter encrypts
all messages sent across the wire. The type of security implemented will depend
on your needs; it's not necessarily required to implement both types of
security.
Thanks, Erik
--- On Sat, 10/3/09, Shirren <shirren.premaratne@...> wrote:
> From: Shirren <shirren.premaratne@...>
> Subject: Re: [HAPI-devel] HAPI and SSL
> To: "Jaime Hablutzel Egoavil" <hablutzel1@...>,
hl7api-devel@...
> Date: Saturday, October 3, 2009, 8:25 AM
>
>
>
>
>
>
>
> Hi Jamie,
>
> We do the same
> thing, we have designed a
> series of web service wrappers over the HL7 messages and
> events, it is at this
> level that we apply security which includes WS-Security and
> SSL, this will
> become part of the published standard in
> Australia.
>
> Regards
> Shirren
>
> ----- Original Message
> -----
> From:
> Jaime
> Hablutzel Egoavil
> To: hl7api-devel@...
>
>
> Sent: Saturday,
> October 03, 2009 6:37
> AM
> Subject: Re:
> [HAPI-devel] HAPI and
> SSL
>
> I'm just getting inside HL7 for the hospital
> where I work, and
> for now I have considered using a web service as a
> wrapper (String
> method(String)) for hl7 messages and apply security at
> web service level using
> axis2, WS security, SSL, but I wonder what is the best
> solution, for clients
> and servers talking HL7...
>
>
> On Fri, Oct 2, 2009 at 11:37 AM,
> Mike DiChiappari <mdichiappari@...>
>
> wrote:
>
> Is anyone using HAPI with
> SSL?
>
> Thanks,
> Mike
>
>
------------------------------------------------------------------------------
> Come
> build with us! The BlackBerry® Developer
> Conference in SF, CA
> is
> the only developer event you need to attend this year.
> Jumpstart
> your
> developing skills, take BlackBerry mobile applications to
> market and
> stay
> ahead of the curve. Join us from November 9-12,
> 2009.
> Register now!
> build with us! The BlackBerry® Developer
> Conference in SF, CA
> is
> the only developer event you need to attend this year.
> Jumpstart
> your
> developing skills, take BlackBerry mobile applications to
> market and
> stay
> ahead of the curve. Join us from November 9-12,
> 2009.
> Register now!
> -----Inline Attachment Follows-----
>
>
------------------------------------------------------------------------------
> Come build with us! The BlackBerry® Developer
> Conference in SF, CA
> is the only developer event you need to attend this year.
> Jumpstart your
> developing skills, take BlackBerry mobile applications to
> market and stay
> ahead of the curve. Join us from November 9-12, 2009.
> Register now!
> -----Inline Attachment Follows-----
--
Jaime Hablutzel
(tildes omitidas intencionalmente) 9 8964 0369
--
Jaime Hablutzel
(tildes omitidas intencionalmente) 9 8964 0369
------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference_______________________________________________
Hl7api-devel mailing list
Hl7api-devel@...
https://lists.sourceforge.net/lists/listinfo/hl7api-devel
|
|
Re: Fwd: HAPI and SSL
Hi Everyone, I'll just throw in 2 cents from my perspective, although I'm mostly just repeating the good information already presented. :) By far the most common way of encrypting messages as they flow across a stream (here in Canada at least) is by passing them through an encrypted VPN tunnel. That way they are encrypted when they leave the local network, but the end systems don't need to know anything about the encryption.
HAPI supports SSL connections (you just need to pass in a SecureSocket of your own creation), and I've heard a few reports of people doing this successfully, but in my experience there aren't too many applications out there that support this.
The approach that is starting to gain a lot of traction here (and it sounds like in Australia as well!) is sending HL7 v2 messages as payloads in a SOAP message, often encrypted. This approach is more work to set up, but I really like it for the ease of encryption and for the fact that you can send metadata along with the message.
One final note, for sending user authentication information, it's probably worth mentioning that HL7 v2.6 added a UAC segment to most message types for this purpose. That information may or may not be helpful- I've never heard of anyone using it, but it's there, so someone must.
Cheers, James On Tue, Oct 6, 2009 at 4:22 PM, Sharma, Niranjan K (GE Healthcare) <niranjan.sharma@...> wrote:
You need to hook up your SSL sockets to an access management
engine..like this http://www.sun.com/software/products/opensso_enterprise/index.xml
Hope this makes sense?
Thanks.
Regards
-Niranjan.
From: Jaime Hablutzel
Egoavil [mailto:hablutzel1@...]
Sent: Tuesday, October 06, 2009 1:47 PMSubject: Re: [HAPI-devel] Fwd: HAPI and SSL
thank you Niranjan, but what
facities can I use to implement user authorization? is the a hl7 specific
message to manage authentication?
regards.
On Tue, Oct 6, 2009 at 2:09 PM, Sharma, Niranjan K (GE
Healthcare) <niranjan.sharma@...>
wrote:
There is a choice for you to
excersize..implement ServerSocket call into SSL socket . This is in
TransportLayer domains.
Have a look at it.
From: Jaime Hablutzel Egoavil [mailto:hablutzel1@...]
Sent: Monday, October 05, 2009 10:34 PM
Subject: [HAPI-devel] Fwd: HAPI and SSL
I can realize that some of you are using web services for message
transportation, but... is this the best??
doesn't it add an unnecesary level of complexity? I can realize that HAPI has a
message transport implementation. I would like to know all alternatives before
getting into production at the hospital I work for 1
1. www.hndac.gob.pe
On Sat, Oct 3, 2009 at 1:46 PM, Erik Gfesser <erik_gfesser@...>
wrote:
Please note that the WS-Security standard covers message layer security,
while SSL (actually TLS) covers transport layer security. The former encrypts
individual messages as they are sent across the wire, while the latter encrypts
all messages sent across the wire. The type of security implemented will depend
on your needs; it's not necessarily required to implement both types of
security.
Thanks, Erik
--- On Sat, 10/3/09, Shirren <shirren.premaratne@...> wrote:
> From: Shirren <shirren.premaratne@...>
> Subject: Re: [HAPI-devel] HAPI and SSL
> To: "Jaime Hablutzel Egoavil" <hablutzel1@...>,
hl7api-devel@...
> Date: Saturday, October 3, 2009, 8:25 AM
>
>
>
>
>
>
>
> Hi Jamie,
>
> We do the same
> thing, we have designed a
> series of web service wrappers over the HL7 messages and
> events, it is at this
> level that we apply security which includes WS-Security and
> SSL, this will
> become part of the published standard in
> Australia.
>
> Regards
> Shirren
>
> ----- Original Message
> -----
> From:
> Jaime
> Hablutzel Egoavil
> To: hl7api-devel@...
>
>
> Sent: Saturday,
> October 03, 2009 6:37
> AM
> Subject: Re:
> [HAPI-devel] HAPI and
> SSL
>
> I'm just getting inside HL7 for the hospital
> where I work, and
> for now I have considered using a web service as a
> wrapper (String
> method(String)) for hl7 messages and apply security at
> web service level using
> axis2, WS security, SSL, but I wonder what is the best
> solution, for clients
> and servers talking HL7...
>
>
> On Fri, Oct 2, 2009 at 11:37 AM,
> Mike DiChiappari <mdichiappari@...>
>
> wrote:
>
> Is anyone using HAPI with
> SSL?
>
> Thanks,
> Mike
>
>
------------------------------------------------------------------------------
> Come
> build with us! The BlackBerry® Developer
> Conference in SF, CA
> is
> the only developer event you need to attend this year.
> Jumpstart
> your
> developing skills, take BlackBerry mobile applications to
> market and
> stay
> ahead of the curve. Join us from November 9-12,
> 2009.
> Register now!
> build with us! The BlackBerry® Developer
> Conference in SF, CA
> is
> the only developer event you need to attend this year.
> Jumpstart
> your
> developing skills, take BlackBerry mobile applications to
> market and
> stay
> ahead of the curve. Join us from November 9-12,
> 2009.
> Register now!
> -----Inline Attachment Follows-----
>
>
------------------------------------------------------------------------------
> Come build with us! The BlackBerry® Developer
> Conference in SF, CA
> is the only developer event you need to attend this year.
> Jumpstart your
> developing skills, take BlackBerry mobile applications to
> market and stay
> ahead of the curve. Join us from November 9-12, 2009.
> Register now!
> -----Inline Attachment Follows-----
--
Jaime Hablutzel
(tildes omitidas intencionalmente) 9 8964 0369
--
Jaime Hablutzel
(tildes omitidas intencionalmente) 9 8964 0369
------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Hl7api-devel mailing list
Hl7api-devel@...
https://lists.sourceforge.net/lists/listinfo/hl7api-devel
------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference_______________________________________________
Hl7api-devel mailing list
Hl7api-devel@...
https://lists.sourceforge.net/lists/listinfo/hl7api-devel
|
|
Re: Fwd: HAPI and SSL
thank you, now I can be sure that it is ok to use web services, and with Hl7 2.6 feature to send user authorization info, I can take away WS-Security, this way getting integration with other platforms better.
On Wed, Oct 7, 2009 at 4:56 PM, James Agnew <james@...> wrote:
Hi Everyone,
I'll just throw in 2 cents from my perspective, although I'm mostly just repeating the good information already presented. :)
By far the most common way of encrypting messages as they flow across a stream (here in Canada at least) is by passing them through an encrypted VPN tunnel. That way they are encrypted when they leave the local network, but the end systems don't need to know anything about the encryption.
HAPI supports SSL connections (you just need to pass in a SecureSocket of your own creation), and I've heard a few reports of people doing this successfully, but in my experience there aren't too many applications out there that support this.
The approach that is starting to gain a lot of traction here (and it sounds like in Australia as well!) is sending HL7 v2 messages as payloads in a SOAP message, often encrypted. This approach is more work to set up, but I really like it for the ease of encryption and for the fact that you can send metadata along with the message.
One final note, for sending user authentication information, it's probably worth mentioning that HL7 v2.6 added a UAC segment to most message types for this purpose. That information may or may not be helpful- I've never heard of anyone using it, but it's there, so someone must.
Cheers,
James
On Tue, Oct 6, 2009 at 4:22 PM, Sharma, Niranjan K (GE Healthcare) <niranjan.sharma@...> wrote:
You need to hook up your SSL sockets to an access management
engine..like this http://www.sun.com/software/products/opensso_enterprise/index.xml
Hope this makes sense?
Thanks.
Regards
-Niranjan.
From: Jaime Hablutzel
Egoavil [mailto:hablutzel1@...]
Sent: Tuesday, October 06, 2009 1:47 PMSubject: Re: [HAPI-devel] Fwd: HAPI and SSL
thank you Niranjan, but what
facities can I use to implement user authorization? is the a hl7 specific
message to manage authentication?
regards.
On Tue, Oct 6, 2009 at 2:09 PM, Sharma, Niranjan K (GE
Healthcare) <niranjan.sharma@...>
wrote:
There is a choice for you to
excersize..implement ServerSocket call into SSL socket . This is in
TransportLayer domains.
Have a look at it.
From: Jaime Hablutzel Egoavil [mailto:hablutzel1@...]
Sent: Monday, October 05, 2009 10:34 PM
Subject: [HAPI-devel] Fwd: HAPI and SSL
I can realize that some of you are using web services for message
transportation, but... is this the best??
doesn't it add an unnecesary level of complexity? I can realize that HAPI has a
message transport implementation. I would like to know all alternatives before
getting into production at the hospital I work for 1
1. www.hndac.gob.pe
On Sat, Oct 3, 2009 at 1:46 PM, Erik Gfesser <erik_gfesser@...>
wrote:
Please note that the WS-Security standard covers message layer security,
while SSL (actually TLS) covers transport layer security. The former encrypts
individual messages as they are sent across the wire, while the latter encrypts
all messages sent across the wire. The type of security implemented will depend
on your needs; it's not necessarily required to implement both types of
security.
Thanks, Erik
--- On Sat, 10/3/09, Shirren <shirren.premaratne@...> wrote:
> From: Shirren <shirren.premaratne@...>
> Subject: Re: [HAPI-devel] HAPI and SSL
> To: "Jaime Hablutzel Egoavil" <hablutzel1@...>,
hl7api-devel@...
> Date: Saturday, October 3, 2009, 8:25 AM
>
>
>
>
>
>
>
> Hi Jamie,
>
> We do the same
> thing, we have designed a
> series of web service wrappers over the HL7 messages and
> events, it is at this
> level that we apply security which includes WS-Security and
> SSL, this will
> become part of the published standard in
> Australia.
>
> Regards
> Shirren
>
> ----- Original Message
> -----
> From:
> Jaime
> Hablutzel Egoavil
> To: hl7api-devel@...
>
>
> Sent: Saturday,
> October 03, 2009 6:37
> AM
> Subject: Re:
> [HAPI-devel] HAPI and
> SSL
>
> I'm just getting inside HL7 for the hospital
> where I work, and
> for now I have considered using a web service as a
> wrapper (String
> method(String)) for hl7 messages and apply security at
> web service level using
> axis2, WS security, SSL, but I wonder what is the best
> solution, for clients
> and servers talking HL7...
>
>
> On Fri, Oct 2, 2009 at 11:37 AM,
> Mike DiChiappari <mdichiappari@...>
>
> wrote:
>
> Is anyone using HAPI with
> SSL?
>
> Thanks,
> Mike
>
>
------------------------------------------------------------------------------
> Come
> build with us! The BlackBerry® Developer
> Conference in SF, CA
> is
> the only developer event you need to attend this year.
> Jumpstart
> your
> developing skills, take BlackBerry mobile applications to
> market and
> stay
> ahead of the curve. Join us from November 9-12,
> 2009.
> Register now!
> build with us! The BlackBerry® Developer
> Conference in SF, CA
> is
> the only developer event you need to attend this year.
> Jumpstart
> your
> developing skills, take BlackBerry mobile applications to
> market and
> stay
> ahead of the curve. Join us from November 9-12,
> 2009.
> Register now!
> -----Inline Attachment Follows-----
>
>
------------------------------------------------------------------------------
> Come build with us! The BlackBerry® Developer
> Conference in SF, CA
> is the only developer event you need to attend this year.
> Jumpstart your
> developing skills, take BlackBerry mobile applications to
> market and stay
> ahead of the curve. Join us from November 9-12, 2009.
> Register now!
> -----Inline Attachment Follows-----
--
Jaime Hablutzel
(tildes omitidas intencionalmente) 9 8964 0369
--
Jaime Hablutzel
(tildes omitidas intencionalmente) 9 8964 0369
------------------------------------------------------------------------------
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Hl7api-devel mailing list
Hl7api-devel@...
https://lists.sourceforge.net/lists/listinfo/hl7api-devel
-- Jaime Hablutzel (tildes omitidas intencionalmente) 9 8964 0369
------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference_______________________________________________
Hl7api-devel mailing list
Hl7api-devel@...
https://lists.sourceforge.net/lists/listinfo/hl7api-devel
|
