Rostislav Antonov

Payerbox took part in two tracks at the 7th Annual CMS HL7 FHIR Connectathon: Burden Reduction and PDex. What we tested against live EHR and payer systems, what broke, and what we changed.

FHIR security labels can limit access not just to whole resources but to individual fields. Rostislav Antonov’s DevDays talk shows how this works in Aidbox and what trade-offs it creates around leakage, performance, and write protection.

Token Introspection is the critical bridge between Authentication and Authorization. When a client presents a token to access FHIR resources, the server must check if the token is valid.

FHIR Security Labels provide row- and field-level access control. Real-world examples for psychiatrists, nurses, and billers using Aidbox.

How can confidentiality of data be ensured and access to these data be controlled among system users, considering different access levels and data sensitivity?

What the Patient Data Access API is, how it relates to CMS rules, and how to implement it on a FHIR server like Aidbox — with code samples.