Correct restatement - openEHR Security

Hi everyone,

For over two weeks now, I am searching information about openEHR. The reason is that I' am going to use it for my Master thesis. What I should do, is a research on security and ethical issues of EHR over the cloud. An application is needed also to be setup,including security.

I have some questions and I would be grateful if someone could help me.

So far, i have learned:
1) The installation of ref_impl_java are *.jar files which consist the core (followed the installation instructions) and can be used for the development of an EHR, like EHRflex.
2) The project does not include any html or other forms, as they are created from archetypes and templates. Is there any way to make openEHR run? It would be nice to see how it's working. I know that there is a tool from ocean informatics (Template Designer) that creates forms, but it needs license. Except this, I don't think forms are enough to make openEHR run.
3) Will openEHR work if i deploy it to the cloud?

Please, correct me if I am wrong.

About security:
Firstly, I am thinking of upgrading the security of the openEHR, by adding the OWASP ten most critical web application security risks ( https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project), by adding ESAPI ( https://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API).

4) Is this feasible? If so, from where should I start? Any suggestions about which code I should not change?

I would be grateful if someone could give me any advice or help or guidance.

With regards,
Kourtis Panagiotis

Hello Panagiotis

Please see below:

So far, i have learned:
1) The installation of ref_impl_java are *.jar files which consist the
core (followed the installation instructions) and can be used for the
development of an EHR, like EHRflex.

The ref_impl_java project contains a set of classes that will allow you to work with openEHR artifacts (archetypes, data structures resulting from archetypes, etc) but it would still require some work to "transform" it to a complete application.

Instead, maybe a good starting point towards your objective would be the opereffa project:http://opereffa.chime.ucl.ac.uk/introduction.jsf

2) The project does not include any html or other forms, as they are
created from archetypes and templates.

The ref_impl_java project does not include the code to create GUIs (in any form) from archetypes and templates

Is there any way to make openEHR
run?

The ref_impl_java project is not a complete application. It is just the implementation of the data model explained in the specifications.

It would be nice to see how it's working. I know that there is a
tool from ocean informatics (Template Designer) that creates forms, but
it needs license. Except this, I don't think forms are enough to make
openEHR run.

The template designer and archetype editor can be downloaded and used from: http://wiki.oceaninformatics.com/confluence/display/TTL/Template+Designer and http://wiki.oceaninformatics.com/confluence/display/TTL/Archetype+Editor Alternatively there is also the LinkEHR project that provides some relevant tools at http://www.linkehr.com/

3) Will openEHR work if i deploy it to the cloud?

You are going to have to explore that option by examining what tools are available: http://www.openehr.org/projects/java.html (Software projects tab)

About security:
Firstly, I am thinking of upgrading the security of the openEHR, by
adding the OWASP ten most critical web application security risks (
https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project), by
adding ESAPI (
https://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API).

This is probably something to consider using opereffa for.

4) Is this feasible? If so, from where should I start? Any suggestions
about which code I should not change?

Familiarising yourself with opereffa is probably a good start.

Hope this helps.

All the best
Athanasios Anastasiou

Mr Anastasiou, Thank you very much for your instant reply. I am planning to download opereffa and get familiar with it, as you mentioned. I hope there is no problem downloading a vesrion from this repository with eclipse, as I am working on my Ubuntu machine and I would prefer to install it there. (As I see, the source repository from the openEHR site needs authentication ). Best Regards, Panagiotis Kourtis.

Hello Panagiotis

I am planning to download opereffa and get familiar with it, as you
mentioned. I hope there is no problem downloading a vesrion from this
repository https://github.com/opereffa/opereffa with eclipse, as I am
working on my Ubuntu machine and I would prefer to install it there.
(As I see, the source repository from the openEHR site needs
authentication http://www.openehr.org/svn/opereffa).

Seref (http://opereffa.chime.ucl.ac.uk/about.jsf) is probably the best person to answer these questions.

All the best
Athanasios Anastasiou