FHIRForm: An Open-Source Framework for the Management of Electronic Forms in Healthcare.

Electronic Forms (E-Forms) for data capture are vital for most health information systems in public health and clinical research. Standardized electronic forms ensure accurate data collection, consistent form rendering, easy maintainability, and interoperability. Adopting an innovation research method we explore the challenges of standardized data capture in healthcare and offer a pragmatic solution. We appraise existing standards and software to propose the list of requirements for an ideal E-form framework. Our proposed solution leverages FHIR specification and existing open-source software tools. We discuss how our open-source solution can be extended collaboratively and discuss its value using InterRAI instruments as examples.

OpenID Connect as a security service in cloud-based medical imaging systems.

The evolution of cloud computing is driving the next generation of medical imaging systems. However, privacy and security concerns have been consistently regarded as the major obstacles for adoption of cloud computing by healthcare domains. OpenID Connect, combining OpenID and OAuth together, is an emerging representational state transfer-based federated identity solution. It is one of the most adopted open standards to potentially become the de facto standard for securing cloud computing and mobile applications, which is also regarded as "Kerberos of cloud." We introduce OpenID Connect as an authentication and authorization service in cloud-based diagnostic imaging (DI) systems, and propose enhancements that allow for incorporating this technology within distributed enterprise environments. The objective of this study is to offer solutions for secure sharing of medical images among diagnostic imaging repository (DI-r) and heterogeneous picture archiving and communication systems (PACS) as well as Web-based and mobile clients in the cloud ecosystem. The main objective is to use OpenID Connect open-source single sign-on and authorization service and in a user-centric manner, while deploying DI-r and PACS to private or community clouds should provide equivalent security levels to traditional computing model.