Real Time Information Director User Documentation

Technical Overview of the Real Time Information Director
Hewlett-Packard Company 12 529618 - 002
The Subscription Server posts the outgoing message to the JMS topic or queue specified
in the subscription.
The Subscription Server has the following additional features:
• The ability to enable previously configured subscriptions when the application
restarts
• The ability to resume subscriptions automatically after a failure
• The ability to accommodate increases and decreases in load for optimal use of
system resources
• The ability to deliver messages even under peak conditions
Security and Auditing
The Director has flexible security and auditing features, designed to protect the rights of
the consumer. Security policies restrict access to data pertaining to a consumer; auditing
provides a record of who read or modified what data.
Both security and auditing depend on
• Identification of the consumer to whom the data applies, if the data applies to
one consumer. Examples of consumers are a customer of a financial institution, a
patient known to an EHR system, and a guest of a hotel.
• Identification of the agent, that is, of the person who submits a query or change
to the database. Such a person might be a doctor or a customer service agent.
The client provides this information in the header of a document.
The metadata defining a document indicates whether the document requires security
and/or auditing. For security, the metadata specifies the name of the security policy that
governs access to the document. For auditing, the metadata can specify what details
must be recorded by the audit.
Consumers and Agents
Consumers and agents are identified in a document header by external IDs. An external
ID is a character string that consists of the ID itself, followed by the name or code of an
issuing agency, for example (“123-45-6789”, “Social Security”). When the consumer or
agent is first registered in the system, the Director assigns a unique internal ID. If the
same person has multiple external IDs, those IDs can be correlated to the same internal
ID. Identities of consumers and agents are handled in the same way, partly because a
consumer can also be an agent, as in the case of a patient requesting data about himself
from an EHR system. (If the person who submits a query is also the subject of the query,
the consumer and agent specified in the header will have the same ID.)