HelseID Introducing Modern Web Security in a Geriatric Health Sector
summary
HelseID is a national trust service that protects Norway’s health APIs using OAuth2 and OpenID Connect running on an IdentityServer stack; it issues roughly 1 million tokens per week and handles about 100,000 logons weekly from 500+ production clients (1,000+ in test). The rollout supports legacy desktop EHRs by embedding a browser component or invoking the system browser with URL callbacks, it enabled rapid pandemic APIs for test and vaccine data, and it targets 99.9% availability.
AI-written summary · about
chapters (31)
- 0:00Introduction
- 2:43About Rune
- 3:48Norway
- 4:50The Norwegian Health Sector
- 7:01A bit of history
- 9:42Helse
- 16:38Norway Institute of Public Health
- 18:49Apis
- 20:54Web Browser
- 25:26Web Applications
- 26:16National Service
- 26:56GDPR
- 29:36Challenges
- 31:33Availability
- 32:20Growth
- 36:00Automating
- 40:43Summary
- 45:30Questions
- 45:41Relation between HeID and Nordic Health Network
- 46:45Who is supporting all the applications
- 48:00Two questions
- 48:24Who can offer healthcare systems
- 48:35Approval processes
- 51:19Cloud fallback
- 52:25Financing
- 53:27Norwegian National ID
- 55:07Technical indepth
- 55:39API versioning
- 56:34Client requirements
- 57:34Prebuilt libraries
- 58:56Software development process
related talks
01h 03mHelseID
57mDeath by downtime
59mOAuth2 on a national level - how to secure extremely sensitive apis
01h 01mSharing Health Information Through APIs
28mBringing FIDO2 to National Identity
47mWho's your user? OpenID from the ground-up
45mModern Identity Management in the Era of Serverless and Microservices
51mHealth Credentials, Travel, Climate Change, Financial Inclusion & More: Digital Identity Gets Real