The Encrypted HL7 “HL7e” Standard
<p><img class="alignnone size-full wp-image-223" title="Hl7e Standard" src="http://blog.fluxinc.ca/wp-content/uploads/2009/07/Hl7e.gif" alt="Hl7e Standard" width="687" height="150" /></p>
<p>We have recently completed a pilot study as part of the Ontario Osteoporosis Strategy to investigate wide network transmission over our own implementation of a secure HL7 standard that we are tentatively calling HL7e. Â The purpose of this study was to investigate the overall feasibility and loading characteristics of a fault tolerant point-to-point HL7 messaging network.</p>
<p>The HL7e protocol, loosely defined, is a wrapper for the general standard, encapsulating each message in an SSL encrypted tunnel. Â The main actors in our implementation are:</p>
<ol>
<li>HL7e Gateway Processes</li>
<li>The HL7e Server</li>
</ol>
<p><strong>HL7e Gateway</strong></p>
<p>These gateway processes listen for regular HL7 messages from modalities, encrypt the contents, and re-transmit  to sequences of further gateways or HL7e Servers.  The purpose of the gateway is to secure messages, and act as both a carrier and queue for further transmission.  Our HL7e Gateways are fully standards compliant, and can be plugged into any HL7e workflow, maintaining data endpoints, and even providing a temporary store in the event that recipient resources are offline.</p>
<p><em>Through-the-Pipe Encryption</em></p>
<p>Because HL7 Messages are encrypted by the first gateway in the chain, re-transmission in a gateway-to-gateway pathway is possible while maintaining data security and integrity. Â Implementation of our very own conditional FluxML workflow XML language ensures that path failover occurs in the event of gateway outages, and data safely arrives at its destination.</p>
<p><strong>HL7e Server</strong></p>
<p>The HL7e server is the final point in an HL7e network. Â It receives encrypted HL7e messages, decrypts them, and stores them in a local database for later use. Â As the final purpose of our tests is to establish the feasibility of mass HL7 data aggregation, this final destination is a temporary store of unaltered HL7 messages from the originating modalities. Â Our HL7e protocol ensures that HL7 data remains untouched throughout the process, and industry standard encryption technology is harnessed to ensure integrity down the entire pipe.</p>