FHIR IG analytics| Package | hl7.fhir.us.davinci-cdex |
| Resource Type | Basic |
| Id | Basic-cdex-signer.json |
| FHIR Version | R4 |
| Source | https://build.fhir.org/ig/HL7/davinci-ecdx/Requirements-cdex-signer.html |
| URL | http://hl7.org/fhir/us/davinci-cdex/Requirements/cdex-signer |
| Version | 2.1.0 |
| Status | draft |
| Date | 2026-07-09T22:52:27+00:00 |
| Name | CDexSignerRequirements |
| Title | CDex Signer Requirements |
| Realm | us |
| Authority | hl7 |
| Copyright | Used by permission of HL7 International all rights reserved Creative Commons License |
No resources found
No resources found
Note: links and images are rebased to the (stated) source
Generated Narrative: Requirements cdex-signer
| CONF-026 | SHALL | Both CDex Task Attachment Request Profile and the DTR Standard Questionnaire profile have the overlapping capability to indicate that a signature is required. Signers SHALL meet both the Task and Questionnaire signature expectations. Links:
|
| CONF-027 | SHALL | SHALL use the CDex Digital Signature Profile with the CDex Signature Bundle Profile for digitally signed Bundles and with the CDex SDC QuestionnaireResponse Profile for digitally signed QuestionnaireResponse. Links:
|
| CONF-028 | SHALL | [Implementers SHALL follow the following FHIR R6 JSON Signature rules]: The Signature.data is base64 encoded JWS-Signature [RFC 7515]: JSON Web Signature (JWS) Links:
|
| CONF-029 | SHALL | [Implementers SHALL follow the following FHIR R6 JSON Signature rules]: The JWS mime type Links:
|
| CONF-030 | SHALL | [Implementers SHALL follow the following FHIR R6 JSON Signature rules]:...SHALL use the IETF JSON Canonicalization Scheme (JCS) (see RFC 8785) to generate the canonical form of the resource. Links:
|
| CONF-031 | SHALL | [Implementers SHALL follow the following FHIR R6 JSON Signature rules]:... the URI Links:
|
| CONF-034 | SHALL | [Implementers SHALL follow the following FHIR R6 JSON Signature rules]: Links:
|
| CONF-035 | SHALL | [Implementers SHALL follow the following FHIR R6 JSON Signature rules]: For signatures representing the entire QuestionnaireResponse, Links:
|
| CONF-036 | SHALL | [Implementers SHALL follow the following FHIR R6 JSON Signature rules]: For signatures representing an item in the QuestionnaireResponse, the Links:
|
| CONF-037 | SHALL | [Implementers SHALL follow the following FHIR R6 JSON Signature rules]: The signature SHALL include a Links:
|
| CONF-038 | SHALL | [Implementers SHALL follow the following FHIR R6 JSON Signature rules]: The Links:
|
| CONF-039 | SHALL | [Implementers SHALL follow the following FHIR R6 JSON Signature rules]: The Links:
|
| CONF-040 | SHALL | [The signature header] SHALL include an Links:
|
| CONF-042 | SHALL | [The signature header] SHALL have Links:
|
| CONF-043 | SHALL | [The signature header] SHALL include a Links:
|
| CONF-044 | SHALL | [The signature header] SHALL include a Links:
|
| CONF-046 | SHALL | [The signature] SHALL support JWS compact serialization format for single signatures Links:
|
| CONF-048 | SHALL | The [signature] certificate SHALL include a Subject Alternative Name (SAN) Links:
|
| CONF-049 | SHALL | [The] Subject Alternative Name (SAN) ... SHALL match the Links:
|
| CONF-045 | SHOULD | [The signature] SHOULD use the hashing algorithm SHA256. The signature validation policy will apply to the signature and determine the acceptability Links:
|
| CONF-047 | SHOULD | [The signature] SHOULD support JWS JSON Serialization format to represent multiple signatures with identical parameter values except Links:
|
| CONF-032 | MAY | Implementers that support both XML and JSON wire formats MAY support cross format signatures by:
Links:
|
| CONF-070 | SHALL | [Implementers SHALL follow the following FHIR R6 JSON Signature rules]: The signature is a [Detached] Signature (where the content that is signed is removed from the JWS) Links:
|
| CONF-071 | SHALL | [Implementers SHALL follow the following FHIR R6 JSON Signature rules]: The Links:
|
| CONF-072 | SHALL | [Implementers SHALL follow the following FHIR R6 JSON Signature rules]: When FHIR Resources are signed, the signature is across the Canonical JSON form of the resource(s) Links:
|
FHIR
FHIRsmith{
"resourceType": "Basic",
"id": "cdex-signer",
"text": {
"status": "generated",
"div": "<!-- snip (see above) -->"
},
"extension": [
{
"url": "http://hl7.org/fhir/StructureDefinition/structuredefinition-wg",
"valueCode": "claims"
},
{
"url": "http://hl7.org/fhir/StructureDefinition/structuredefinition-fmm",
"valueInteger": 2,
"_valueInteger": {
"extension": [
{
"url": "http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom",
"valueCanonical": "http://hl7.org/fhir/us/davinci-cdex/ImplementationGuide/hl7.fhir.us.davinci-cdex"
}
]
}
},
{
"url": "http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status",
"valueCode": "trial-use",
"_valueCode": {
"extension": [
{
"url": "http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom",
"valueCanonical": "http://hl7.org/fhir/us/davinci-cdex/ImplementationGuide/hl7.fhir.us.davinci-cdex"
}
]
}
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.url",
"valueUri": "http://hl7.org/fhir/us/davinci-cdex/Requirements/cdex-signer"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.version",
"valueString": "2.1.0"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.name",
"valueString": "CDexSignerRequirements"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.title",
"valueString": "CDex Signer Requirements"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.status",
"valueCode": "draft"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.date",
"valueDateTime": "2026-07-09T22:52:27+00:00"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.publisher",
"valueString": "HL7 International / Payer/Provider Information Exchange Work Group"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.contact",
"valueContactDetail": {
"name": "HL7 International / Payer/Provider Information Exchange Work Group",
"telecom": [
{
"system": "url",
"value": "http://www.hl7.org/Special/committees/claims"
},
{
"system": "email",
"value": "pie@lists.hl7.org"
}
]
}
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.description",
"valueMarkdown": "This [Requirements](https://hl7.org/fhir/R5/requirements.html) resource lists all the CDex Signer requirements defined in the narrative sections of this IG."
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.jurisdiction",
"valueCodeableConcept": {
"coding": [
{
"system": "urn:iso:std:iso:3166",
"code": "US"
}
]
}
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.copyright",
"valueMarkdown": "Used by permission of HL7 International all rights reserved Creative Commons License"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-026"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "Both [CDex Task Attachment Request Profile](StructureDefinition-cdex-task-attachment-request.html) and the [DTR Standard Questionnaire](http://hl7.org/fhir/us/davinci-dtr/2.2.0/StructureDefinition-dtr-std-questionnaire.html) profile have the overlapping capability to indicate that a signature is required. Signers **SHALL** meet both the Task *and* Questionnaire signature expectations. "
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#cdex-signatures"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-027"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "**SHALL** use the [CDex Digital Signature Profile](StructureDefinition-cdex-digital-signature.html) with the [CDex Signature Bundle Profile](StructureDefinition-cdex-signature-bundle.html) for digitally signed Bundles and with the [CDex SDC QuestionnaireResponse Profile](StructureDefinition-cdex-sdc-questionnaireresponse.html) for digitally signed QuestionnaireResponse."
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-028"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[Implementers **SHALL** follow the following FHIR R6 [JSON Signature rules](https://hl7.org/fhir/6.0.0-ballot3/datatypes.html#JSON)]: The Signature.data is base64 encoded JWS-Signature [RFC 7515]: JSON Web Signature (JWS)"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-029"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[Implementers **SHALL** follow the following FHIR R6 [JSON Signature rules](https://hl7.org/fhir/6.0.0-ballot3/datatypes.html#JSON)]: The JWS mime type `application/jose` **SHALL** be indicated in the `Signature.sigFormat` element."
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-030"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[Implementers **SHALL** follow the following FHIR R6 [JSON Signature rules](https://hl7.org/fhir/6.0.0-ballot3/datatypes.html#JSON)]:...**SHALL** use the IETF JSON Canonicalization Scheme (JCS) (see [RFC 8785](https://datatracker.ietf.org/doc/rfc8785)) to generate the canonical form of the resource."
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-031"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[Implementers **SHALL** follow the following FHIR R6 [JSON Signature rules](https://hl7.org/fhir/6.0.0-ballot3/datatypes.html#JSON)]:... the URI `application/fhir+json;canonicalization=http://hl7.org/fhir/canonicalization/json#document` ... **SHALL** be indicated in the `Signature.targetFormat` element."
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-034"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[Implementers **SHALL** follow the following FHIR R6 [JSON Signature rules](https://hl7.org/fhir/6.0.0-ballot3/datatypes.html#JSON)]: `Bundle.id`, and `Bundle.meta` **SHALL** be removed before canonicalization. In other words, everything in a Bundle is signed *except* for these elements."
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-035"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[Implementers **SHALL** follow the following FHIR R6 [JSON Signature rules](https://hl7.org/fhir/6.0.0-ballot3/datatypes.html#JSON)]: For signatures representing the entire QuestionnaireResponse, `QuestionnaireResponse.id`, and `QuestionnaireResponse.meta` elements **SHALL** be removed before canonicalization. In other words, everything in a QuestionnaireResponse is signed *except* for these elements."
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-036"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[Implementers **SHALL** follow the following FHIR R6 [JSON Signature rules](https://hl7.org/fhir/6.0.0-ballot3/datatypes.html#JSON)]: For signatures representing an item in the QuestionnaireResponse, the `QuestionnaireResponse.item.id` **SHALL** be removed before canonicalization. In other words, everything in the `QuestionnaireResponse.item` is signed *except* for these elements."
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-037"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[Implementers **SHALL** follow the following FHIR R6 [JSON Signature rules](https://hl7.org/fhir/6.0.0-ballot3/datatypes.html#JSON)]: The signature **SHALL** include a `\"srCms\"` signer commitments\" header element for the Purpose(s) of the Signature (see [JAdES-B-T](https://www.etsi.org/deliver/etsi_ts/119100_119199/11918201/01.01.01_60/ts_11918201v010101p.pdf), page 17). The Purpose can be the action being attested to, or the role associated with the signature. The value shall come from ASTM E1762-95(2013)."
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-038"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[Implementers **SHALL** follow the following FHIR R6 [JSON Signature rules](https://hl7.org/fhir/6.0.0-ballot3/datatypes.html#JSON)]: The `\"srCms\"` header **SHALL** contain an `\"id\": \"urn:oid:1.2.840.10065.1.12.1.5\"` (Verification Signature)"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-039"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[Implementers **SHALL** follow the following FHIR R6 [JSON Signature rules](https://hl7.org/fhir/6.0.0-ballot3/datatypes.html#JSON)]: The `Signature.type.code` elements **SHALL** contain the same values as the `\"srCms\"` header ids."
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-040"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[The signature header] **SHALL** include an `\"alg\"` parameter for the JSON Web Algorithms (JWA) (see [RFC 7518](https://tools.ietf.org/html/rfc7518)). `\"alg\": \"RS256\"` is preferred."
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-042"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[The signature header] **SHALL** have `\"x5c\"` (X.509 certificate chain) equal to an array of one or more base64-encoded (not base64url-encoded) DER representations of the public certificate or certificate chain (see [RFC 7517](https://tools.ietf.org/html/rfc7517))."
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-043"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[The signature header] **SHALL** include a `\"sigT\"` header parameter with a timestamp of the signature."
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-044"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[The signature header] **SHALL** include a `\"srCms\"` signer commitments as defined above.[ commitments header element for the Purpose(s) of the Signature]"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-046"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[The signature] **SHALL** support JWS compact serialization format for single signatures"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-048"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "The [signature] certificate **SHALL** include a Subject Alternative Name (SAN)"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-049"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[The] Subject Alternative Name (SAN) ... **SHALL** match the `Signature.who.identifier`[element]."
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-045"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHOULD"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[The signature] **SHOULD** use the hashing algorithm SHA256. The signature validation policy will apply to the signature and determine the acceptability"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-047"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHOULD"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[The signature] **SHOULD** support [JWS JSON Serialization](https://datatracker.ietf.org/doc/html/rfc7515#section-3.2) format to represent multiple signatures with identical parameter values except `\"x5c\"`."
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-032"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "MAY"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "Implementers that support both XML and JSON wire formats **MAY** support cross format signatures by:\n- Validating the JSON Web Signatures in the JSON format.\n- Canonicalizing the XHTML`text.div` narrative element following the [FHIR R6 XML Canonicalization rules](https://hl7.org/fhir/6.0.0-ballot3/xml.html#canonical) prior to the JSON canonicalization of the resource.\n- identifying this canonicalization method by the URI `application/fhir+json;canonicalization=http://hl7.org/fhir/canonicalization/json+xml#document` in the `Signature.targetFormat` element."
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-070"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[Implementers **SHALL** follow the following FHIR R6 [JSON Signature rules](https://hl7.org/fhir/6.0.0-ballot3/datatypes.html#JSON)]: The signature is a [Detached] Signature (where the content that is signed is removed from the JWS)"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-071"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[Implementers **SHALL** follow the following FHIR R6 [JSON Signature rules](https://hl7.org/fhir/6.0.0-ballot3/datatypes.html#JSON)]: The `Bundle.signature` or the QuestionnaireResponse [signatureRequired] extension is removed before signing."
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
},
{
"extension": [
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key",
"valueId": "CONF-072"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.conformance",
"valueCode": "SHALL"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement",
"valueMarkdown": "[Implementers **SHALL** follow the following FHIR R6 [JSON Signature rules](https://hl7.org/fhir/6.0.0-ballot3/datatypes.html#JSON)]: When FHIR Resources are signed, the signature is across the [Canonical JSON](https://hl7.org/fhir/6.0.0-ballot3/json.html#canonical) form of the resource(s)"
},
{
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.reference",
"valueUrl": "signatures.html#digital-signature-rules-and-guidance-for-cdex-bundle-and-questionnaireresponse"
}
],
"url": "http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"
}
],
"identifier": [
{
"system": "urn:ietf:rfc:3986",
"value": "urn:oid:2.16.840.1.113883.4.642.40.21.36.4"
}
],
"code": {
"coding": [
{
"system": "http://hl7.org/fhir/fhir-types",
"code": "Requirements"
}
]
}
}