Rostislav Antonov

FHIR security labels can limit access not just to whole resources but to individual fields. Rostislav Antonov’s DevDays talk shows how this works in Aidbox and what trade-offs it creates around leakage, performance, and write protection.

Token Introspection is the critical bridge between Authentication and Authorization. When a client presents a token to access FHIR resources, the server must check if the token is valid.

This article explains how FHIR Security Labels control access to healthcare data by role. It shows how psychiatrists, nurses, and billers see only the data they need, protecting patient privacy. Learn how these labels work at both record and field levels to keep health data safe.

How can confidentiality of data be ensured and access to these data be controlled among system users, considering different access levels and data sensitivity?

We often need to access data for a specific patient while ensuring that access is limited to them. This can be done by adding a patient reference search parameter to each request.