Integration Profile: Audit Trail and Node Authentication

Integration Profile Information

Id: 48

Keyword: ATNA

Name: Audit Trail and Node Authentication

Description: The ITI Audit Trail and Node Authentication (ATNA) Profile establishes the characteristics of a Basic Secure Node: It describes the security environment (user identification, authentication, authorization, access control, etc.) assumed for the node so that security reviewers may decide whether this matches their environments. It defines basic security requirements for the communications of the node using TLS or equivalent functionality. It defines basic auditing requirements for the node. The profile also establishes the characteristics of the communication of audit messages between the Basic Secure Nodes and Audit Repository nodes that collect audit information.

Status: Final Text

Document Section:

IHE ITI TF Vol1 #9 Audit Trail and Node Authenti

Id	Keyword	Name	Description
1	ARR	Audit Record Repository	A system unit that receives and collects audit records from multiple systems.
10	SN	Secure Node	A system unit that validates the identity of any user and of any other node, and determines whether or not access to the system for this user and information exchange with the other node is allowed. Maintains the correct time.
86	SA	Secure Application	The difference between the Secure Node and the Secure Application is the extent to which the underlying operating system and other environment are secured. A Secure Node includes all aspects of user authentication, file system protections, and operating environment security. The Secure Application is a product that does not include the operating environment. The Secure Application provides security features only for the application features. See section 9.7 for the relationships among a Secure Node, Secure Application, and other actors.
1315	AUDIT_RECORD_FORWARDER	Audit Record Forwarder	This actor filters audit records that have been received and forwards selected audit records to an Audit Record Repository. Added to the ATNA profile in Sept 2015 in CP-ITI-872
1323	AC	Audit Consumer	Search for syslog and ATNA audit messages based upon queries using Syslog metadata and ATNA audit message content. Subsequent processing is not defined.

Id	Actor	Transaction	Optionality
15	SN - Secure Node	ITI-1 - Maintain Time	Required
16	SN - Secure Node	ITI-19 - Authenticate Node	Required
17	ARR - Audit Record Repository	ITI-20 - Record Audit Event	Required
756	SA - Secure Application	ITI-1 - Maintain Time	Optional
757	SA - Secure Application	ITI-19 - Authenticate Node	Optional
758	SA - Secure Application	ITI-20 - Record Audit Event	Optional
759	SN - Secure Node	ITI-20 - Record Audit Event	Required
2375	SN - Secure Node	NULL - NULL	Optional
2376	SA - Secure Application	NULL - NULL	Optional
2429	ARR - Audit Record Repository	ITI-81 - Retrieve ATNA Audit Event	Optional
2430	ARR - Audit Record Repository	ITI-82 - Retrieve Syslog Event	Optional
2431	AUDIT_RECORD_FORWARDER - Audit Record Forwarder	ITI-20 - Record Audit Event	Required
2460	AC - Audit Consumer	ITI-81 - Retrieve ATNA Audit Event	Optional
2461	AC - Audit Consumer	ITI-82 - Retrieve Syslog Event	Optional

Id	Actor	Integration Profile Option
182	SN - Secure Node	RAD_AUDIT_TRAIL_OPTION - Radiology Audit Trail
249	SN - Secure Node	DEPRECATED: ATNA_ENCRYPTION - DEPRECATED ATNA Encryption
250	SA - Secure Application	DEPRECATED: ATNA_ENCRYPTION - DEPRECATED ATNA Encryption
655	SN - Secure Node	NONE - None
656	ARR - Audit Record Repository	NONE - None
868	SA - Secure Application	NONE - None
1776	SA - Secure Application	RAD_AUDIT_TRAIL_OPTION - Radiology Audit Trail
2347	AUDIT_RECORD_FORWARDER - Audit Record Forwarder	NONE - None
2357	ARR - Audit Record Repository	RETRIEVE_AUDIT_MSG - Retrieve Audit Message
2358	AC - Audit Consumer	RETRIEVE_AUDIT_MSG - Retrieve Audit Message
2420	SA - Secure Application	BCP195_TLS_1.2_FLOOR - BCP195 TLS Secure Transport Connection - TLS 1.2 Floor
2421	SA - Secure Application	BCP195_TLS_ALL_VERSIONS - BCP195 TLS Secure Transport Connection - All TLS Versions
2422	SN - Secure Node	BCP195_TLS_1.2_FLOOR - BCP195 TLS Secure Transport Connection - TLS 1.2 Floor
2423	SN - Secure Node	BCP195_TLS_ALL_VERSIONS - BCP195 TLS Secure Transport Connection - All TLS Versions
2424	SA - Secure Application	FQDN_VALIDATION_OF_SERVER_CERT - FQDN Validation of Server Certificate
2425	SN - Secure Node	FQDN_VALIDATION_OF_SERVER_CERT - FQDN Validation of Server Certificate
2562	ARR - Audit Record Repository	ATX_FHIR_FEED - ATX_FHIR_FEED
2563	AUDIT_RECORD_FORWARDER - Audit Record Forwarder	ATX_FHIR_FEED - ATX_FHIR_FEED
2564	SA - Secure Application	ATX_FHIR_FEED - ATX_FHIR_FEED
2565	SN - Secure Node	ATX_FHIR_FEED - ATX_FHIR_FEED

Domains

Id	Keyword	Name	Description
2	ITI	IT-Infrastructure	The IT Infrastructure Domain supplies infrastructure for sharing healthcare information. An infrastructure interoperability component represents a common IT function that is used as a building block for a variety of use cases... a necessary ingredient, but rarely visible to the end user!! These components may be embedded in an application, but are often deployed as a shared resource within a RHIO or Health Information Exchange.