Tech Talk: APIs in Healthcare: How to Increase Interoperability and Security With FHIR and CA API Management

World®’16

TechTalk:APIsinHealthcare:HowtoIncreaseInteroperabilityandSecurityWithFHIRandCAAPIManagementDavidBressler - VP,VerticalMarkets,APIManagement- CATechnologies(@djbressler)

DO3T21T

DEVOPS

2 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

©2016CA.Allrightsreserved.HL7andFHIRaretheregisteredtrademarkofHealthLevelSevenInternational.TwitterisatrademarkofTwitter,Inc.oritsaffiliates.Alltrademarksreferencedhereinbelongtotheirrespectivecompanies.

Thecontentprovidedinthis CAWorld2016presentationisintendedforinformationalpurposesonlyanddoesnotformanytypeofwarranty. CAmakesnowarrantiesorpromisesregardingHIPAAcompliancewithrespecttoanyCAproductorservice.The informationprovidedbyaCApartnerand/orCAcustomerhasnotbeenreviewedforaccuracybyCA.

ForInformationalPurposesOnlyTermsofthisPresentation


Abstract

WiththeemergenceoftheFastHealthcareInteroperabilityResources(FHIR)APIstandardfromHL7,thehealthcareindustryispoisedforamajorchangeinhowitsharesandsecuresmedical,patient,andfinancialdata.Toachievetrueinteroperabilityinthefuture,allhealthorganizations- fromthelargestprovidernetworkstothesmallestmHealth startups- willhavetounderstandandadoptanAPIstrategy.Inthissession,wewillofferahands-ondemoanddiscussionofFHIRAPIsbeingsecured,managed,andusedthroughCAAPIManagementSaaS,thecloudversionofouranalyst-acclaimedtechnology.

DavidBresslerCATechnologiesVP,VerticalMarkets,APIManagement


Agenda

APPLICATIONECONOMYIMPACTONHEALTHCAREPROVIDERS

APIMANAGEMENTASAMAGICMULTIPLIER

CAAPIMANAGEMENTDEVELOPERPORTALFORTHEFHIRSTANDARD

SMARTONFHIRPOLICYSUPPORT

1

2

3

4



CustomerExperienceDrivesRevenueGrowthRevenueGrowthforIndividualCompaniesinSelectIndustries,2010-2014

"DoesCustomerExperienceReallyDriveBusinessSuccess?"ForresterResearch,Inc.,July15,2015ReferenceLink:Forrester


AGreatCustomerExperienceEliminatesFriction


ThePlatformInformstheExperience


DeepSecurityIdentityiskeyHealthhistorycan’tberesetMobilesecuritymodelsdifferfromwebsecuritymodelsSecurityaspartoftheapp,inadditiontobeingpartoftheinfrastructure

MoreSoftwareMoreexperiencesMoretargetpersonaMoreopportunitytoengageasaresultofhavinga“computerinyourpocket”

CraftedwithCareThecompetitionaresmallcompaniesgoingdeeponasingleexperienceAppsarejudgedveryquickly;looksmatter

WhatDoesThisMeanforMarketParticipants?EveryoneIsImpacted– Providers,Payers,DeviceManufacturers,EvenLargeEmployers


REST*

HTTP

TCP

IP

BackEnd

RESTURLSOAP/WSDL

IDE

KeyValueProps1. SimpleURI

(GET/POST/PUT/DELETE)2. Standardsbased3. Decoupled

CheckoutTwitter’spublicAPI:https://dev.twitter.com/rest/public

WhatIsanAPI?


WhatIstheProblemWithSilos?

1. Brittle– changescouldimpactthewholesystem

2. New‘experiences’needtoversionthewholeend-to-endsilo

3. Everythingisintheapp(security,datamodel,governance)


APIManagementEnablesExperienceCreationatScale

1. Decouples“apps”and“experiences”fromthebackend;requireslesscoordination,lowerscomplexity,improvesspeedtomarket

2. Improvesabilitytocreatenewexperiences,capitalizeonnewbusinessopportunities,getscale(coverageontheproblem)

3. Unbundlessecurity,datamodel,analytics,governance

APIMANAGEMENT…


CAMobileAppServices

CAAPIGatewayCAMobileAPIGatewayCAAPIDeveloperPortalCALiveAPICreator • Consume

• Develop

- EntireAPILifecycle

+Mobile• Promote• Acquire

• Define• Create

• Secure• Runtime

CAAdvancedAuthenticationCASingleSign-OnCAApplicationPerformanceManagement

FHIR®APIs

SMARTonFHIR®

MU3FHIR®Services

CAAPIManagement- Healthcare

World®’16©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD13


HealthcareDeveloperSandbox:http://fhir.dev.ca.comSupportingtheHL7®FHIR®Standard

TestFHIR®ServerFHIR®APIS

ConformanceStatement

DevelopersAPIExplorerto:1.exploreFHIR®APIs,2.sendtestmessages,3.generatecode

APIGateway

APIDeveloperPortal

oAuthSecurityAdded

Presenter’snote:Pleasemakesureyou'refollowingHL7'strademarkguidelines.

http://www.hl7.org/legal/trademarks.cfm?ref=navBrandaddedcopyrightinfotobottomofslide.

HL7andFHIRaretheregisteredtrademarksofHealthLevelSevenInternational.


MobileSecurity:SMARTonFHIR®Acceleratedevelopment,improvesecurity,lowercost

TestFHIR®ServerFHIRAPIS


APIGatewayWeb

WebWeb

HealthcareMobile/WebAppsImprovingpatientcarewithamorehumantechnologyexperience1.SMARTonFHIR®

SMARTonFHIR®Definesaprofileinvolvingasetofopenspecificationstointegrateappswithhealthsystems:• FHIR®forstructureddata• OAUT2.0forscopesandpermissions• OPenIDConnectforIdentity• HTML5forlightweightUIintegration






MobileAPIGatewayWeb

WebWeb

HealthcareMobile/WebAppsImprovingpatientcarewithamorehumantechnologyexperience1.SMARTonFHIR®2.Uniquecapabilitiestoimprovedeveloperandpatient/doctorexperiencearoundsecurityinMAGSDK







MobileAppServicesWeb

WebWeb

HealthcareMobile/WebAppsImprovingpatientcarewithamorehumantechnologyexperience1.SMARTonFHIR®2.Uniquecapabilitiestoimprovedeveloperandpatient/doctorexperiencearoundsecurityinMAGSDK

3.MobileaccelerationandsimplicitythroughMAS(FHIRenabledservicesforthingslikeappointmentsandprescriptionmanagement)




Questions?


Thankyou.

Stayconnectedatcommunities.ca.com


DevOps– APIManagementandApplicationDevelopment

FormoreinformationonDevOps– APIManagementandApplicationDevelopment,pleasevisit:http://cainc.to/DL8ozQ

Tech Talk: APIs in Healthcare: How to Increase Interoperability and Security With FHIR and CA API Management

Technology