FHIR © HL7.org  |  FHIRsmith 4.0.1  |  Server Home  |  XIG Home  |  XIG Stats  | 

FHIR IG analytics

PackageSHIFT-Task-Force.sls-ri
Resource TypeCapabilityStatement
IdCapabilityStatement-fhir-sls-server.json
FHIR VersionR4
Sourcehttps://build.fhir.org/ig/SHIFT-Task-Force/sls-ri-ig/CapabilityStatement-fhir-sls-server.html
URLhttp://SHIFT-Task-Force.github.io/sls-ri/CapabilityStatement/fhir-sls-server
Version0.1.0
Statusdraft
Date2026-02-05
NameFHIRSecurityLabelingServiceCapabilityStatement
TitleFHIR Security Labeling Service - Server Capability Statement
Realmuv
DescriptionCapability Statement describing the FHIR Security Labeling Service (SLS) reference implementation. This service analyzes FHIR resources for sensitive information and applies appropriate security labels based on ValueSet-defined rules.
Kindinstance

Resources that use this resource

No resources found


Resources that this resource uses

OperationDefinition
sls-load-valuesetsSLS Load ValueSets for Security Labeling
sls-tagApply Security Labels to FHIR Resources

Narrative

Note: links and images are rebased to the (stated) source

Generated Narrative: CapabilityStatement fhir-sls-server

FHIR Security Labeling Service - Server Capability Statement

  • Implementation Guide Version: 0.1.0
  • FHIR Version: 4.0.1
  • Supported Formats: application/fhir+json, json
  • Published on: 2026-02-05
  • Published by: SHIFT-Task-Force

Note to Implementers: FHIR Capabilities

Any FHIR capability may be 'allowed' by the system unless explicitly marked as 'SHALL NOT'. A few items are marked as MAY in the Implementation Guide to highlight their potential relevance to the use case.

FHIR RESTful Capabilities

Mode: server

FHIR Security Labeling Service providing operations to process ValueSets defining sensitive topics and to analyze resources for security labeling.

Security
Enable CORS: yes
Security services supported:

This is a reference implementation with CORS enabled. Production deployments should implement appropriate authentication and authorization.

Summary of System-wide Operations
ConformanceOperationDocumentation
SHALL$sls-load-valuesets

Processes a Bundle containing ValueSet resources to establish security labeling rules. Supports ValueSets with multiple topic codes via topic[] or useContext[].focus. If a ValueSet lacks an expansion, it will be expanded using tx.fhir.org.

SHALL$sls-tag

Analyzes a Bundle of clinical resources and applies security labels based on loaded ValueSets. Supports two modes: 'batch' (modified resources only) and 'full' (all resources, preserving Bundle structure). Applies confidentiality code 'R' and topic-specific labels to matching resources.


Source1

{
  "resourceType": "CapabilityStatement",
  "id": "fhir-sls-server",
  "text": {
    "status": "extensions",
    "div": "<!-- snip (see above) -->"
  },
  "url": "http://SHIFT-Task-Force.github.io/sls-ri/CapabilityStatement/fhir-sls-server",
  "version": "0.1.0",
  "name": "FHIRSecurityLabelingServiceCapabilityStatement",
  "title": "FHIR Security Labeling Service - Server Capability Statement",
  "status": "draft",
  "experimental": true,
  "date": "2026-02-05",
  "publisher": "SHIFT-Task-Force",
  "contact": [
    {
      "name": "SHIFT-Task-Force",
      "telecom": [
        {
          "system": "url",
          "value": "http://shift-project.org"
        }
      ]
    }
  ],
  "description": "Capability Statement describing the FHIR Security Labeling Service (SLS) reference implementation. This service analyzes FHIR resources for sensitive information and applies appropriate security labels based on ValueSet-defined rules.",
  "jurisdiction": [
    {
      "coding": [
        {
          "system": "http://unstats.un.org/unsd/methods/m49/m49.htm",
          "code": "001"
        }
      ]
    }
  ],
  "kind": "instance",
  "implementation": {
    "description": "FHIR Security Labeling Service Reference Implementation",
    "url": "http://localhost:3000"
  },
  "fhirVersion": "4.0.1",
  "format": [
    "application/fhir+json",
    "json"
  ],
  "rest": [
    {
      "mode": "server",
      "documentation": "FHIR Security Labeling Service providing operations to process ValueSets defining sensitive topics and to analyze resources for security labeling.",
      "security": {
        "cors": true,
        "description": "This is a reference implementation with CORS enabled. Production deployments should implement appropriate authentication and authorization."
      },
      "operation": [
        {
          "name": "sls-load-valuesets",
          "definition": "http://SHIFT-Task-Force.github.io/sls-ri/OperationDefinition/sls-load-valuesets",
          "documentation": "Processes a Bundle containing ValueSet resources to establish security labeling rules. Supports ValueSets with multiple topic codes via topic[] or useContext[].focus. If a ValueSet lacks an expansion, it will be expanded using tx.fhir.org."
        },
        {
          "name": "sls-tag",
          "definition": "http://SHIFT-Task-Force.github.io/sls-ri/OperationDefinition/sls-tag",
          "documentation": "Analyzes a Bundle of clinical resources and applies security labels based on loaded ValueSets. Supports two modes: 'batch' (modified resources only) and 'full' (all resources, preserving Bundle structure). Applies confidentiality code 'R' and topic-specific labels to matching resources."
        }
      ]
    }
  ]
}