FHIR x Nuts: How to combine FHIR and Nuts
summary
Open source Nuts combines DID and Verifiable Credentials with OpenID-for-VC and mTLS so FHIR servers authorize requests by validated attributes instead of fixed client lists. Demo is a GitHub repo and Docker Compose that spins up two Nuts nodes and two FHIR/Filey servers, a Filey Server plugin, and Postman scripts; flow creates a Nuts authorization credential, synchronizes nodes, sends a notified pull notification, exchanges access tokens, and then retrieves FHIR Task and resources directly. Proof-of-concept runs; Netherlands-scale deployments exist in birth and long-term care.
AI-written summary · about
chapters (6)
- 0:00Introduction to FHIR and Nuts
- 1:49What is Nuts and its purpose
- 6:46Challenges in securing FHIR APIs
- 14:21Trust over IP model explained
- 27:34Frank's referral use case demo
- 36:23Q&A session
related talks
43mLet's Build! Patient Mediated Data Connectivity
23mImplementing Provider Directory APIs
01h 01mSharing Health Information Through APIs
43mLet's Build! A FHIR Facade
21mFHIR Data Ingestion Tool: convert, anonymize, and publish
07mLightning Talk: Security Considerations with Fulcio and OIDC JWTs
43mSecurity in FHIR
46mFHIR Bulk Data API + What's New in v2.0