{"type":"doc","content":[{"type":"panel","attrs":{"panelType":"error"},"content":[{"type":"heading","attrs":{"level":3},"content":[{"text":"Disclaimer","type":"text"}]},{"type":"paragraph","content":[{"text":"This module is still under construction. This information may not be accurate","type":"text","marks":[{"type":"textColor","attrs":{"color":"#ff0000"}}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Overview","type":"text"}]},{"type":"paragraph","content":[{"text":"The PHR module (i.e. personalhr) allows you to create a patient controlled health records application. It gives the patient the full control of his/her own health records and other personal information, and enables him/her to share part or all of those information to any one in his/her social network such as a family member, a doctor, or any other caregiver he/she trusts.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Architecture","type":"text"},{"type":"hardBreak"}]},{"type":"paragraph","content":[{"text":"The PHR module defines the following (static) OpenMRS roles / privileges:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"PHR Patient / PHR Single Patient Access","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"PHR Restricted User / PHR Restricted Patient Access","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"PHR Administrator / PHR All Patients Access","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":" , and is composed of the following functional components:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"PHR Patient Registration","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"PHR Invited Self Registration","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"PHR Relationship & Sharing","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"PHR Authentication & Authorization","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"PHR module provides basic user interfaces such as PHR Patient Dashboard, PHR Restricted User Dashboard, and PHR Administrator Dashboard, which can be extended by other modules to create a fully blown PHR application. ","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Sharing Process","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"When Patient adds a new relationship by entering name, relationship type, email address and sharing type and submitting,\n\t","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"System creates a new record in phr_sharing_token table","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"System sends an email to the authorized person containing a link to OpenMRS PHR Login window and the sharing token string","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"When the targeted Person receives the invitation and clicks the URL with Sharing Token embedded to access the information shared by the Patient\n\t","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"System pops up a login window (embedded with Sharing Token)","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"When the targeted Person (Sharee) clicks Sign Up button on the login window\n\t","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"System pops up a self registration window not pre-populated with Patient entered info (still embedded with Sharing Token)","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Person entered his personal information that can be different from Patient entered information and provides username and password to be created","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"System creates a new OpenMRS Person object and a new OpenMRS User account with PHR Restricted User role","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Sharing Token record is updated with the proper share_activate_date, and relation_person_id","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Generate warning if user entered name or email address do not match those stored in the phr_sharing_token table","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"When the targeted Person (Sharee) clicks Login button after supplying his username and password created before on the login window\n\t","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The Sharing Token embedded (if there is one) is checked against phr_sharing_table and corresponding record is updated if and only if relation_person_id is null.","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"When the targeted Person clicks the Person link in his relationship list after logging in\n\t","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"To display the relationship list, System looks up the phr_sharing_token table with the current user's Person ID to find all of the patients he has relationship with","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"After clicking the Patient link in his relationship list, System checks if the current user has a Data sharing Relationship with that clicked Patient by looking up the Relationship table with the clicked person's Person ID and the current user's Person ID and all of its matched Person ID's found in the person_match table\n","type":"text"},{"type":"hardBreak"}]}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"PHR Security","type":"text"},{"type":"hardBreak"}]},{"type":"paragraph","content":[{"text":"PHR authentication and authorization is implemented by PHR security checking at URL Level, Page Level, Controller Level, and Service Level. The Pro & Con of various levels of security are listed as follows:\n","type":"text"},{"type":"hardBreak"}]},{"type":"table","content":[{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"},{"type":"hardBreak"},{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"},{"text":"PRO","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"},{"text":"CON","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"},{"text":"Detail","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"},{"text":"Assumptions","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"},{"text":"Page only security","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" 1. No Java code change is needed to bring in new modules into PHR application ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" 1. JSP page change is needed to bring in new modules into PHR application ","type":"text"},{"type":"hardBreak"},{"text":"\n2. Unable to check privilege on direct DWR or Web Service calls ","type":"text"},{"type":"hardBreak"},{"text":"\n3. Unable to check privilege on base OpenMRS domain access ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" 1. Add and tags in each jsp page ","type":"text"},{"type":"hardBreak"},{"text":"\n2. Map privilege text (registered or not) to PHR dynamic role(s) ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" 1. Non-PHR pages are sufficiently protected by and tags ","type":"text"},{"type":"hardBreak"},{"text":"\n2. PHR users do not have permanent openmrs privileges ","type":"text"},{"type":"hardBreak"},{"text":"\n3. PHR users are given temporary openmrs privileges once logged in ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"},{"text":"URL only security","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" 1. No Java code change is needed to bring in new modules into PHR application ","type":"text"},{"type":"hardBreak"},{"text":"\n2. No JSP page change is needed to bring in new modules into PHR application ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" 1. URL privilege mapping is needed for every page and DWR call ","type":"text"},{"type":"hardBreak"},{"text":"\n1. Data identification not always possible (e.g. if naming convention not followed) ","type":"text"},{"type":"hardBreak"},{"text":"\n2. Unable to check the privilege on embeded JSP script ","type":"text"},{"type":"hardBreak"},{"text":"\n3. Very hard to check the privilege on a POST request, DWR, or Web Service call ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" 1. Check if URL is allowed for given user in URL filter ","type":"text"},{"type":"hardBreak"},{"text":"\n2. Check if data (as identified by patientId, personId, encounterId, etc) is allowed for given user in URL filter ","type":"text"},{"type":"hardBreak"},{"text":"\n3. Map URL to PHR dynamic role(s) ","type":"text"},{"type":"hardBreak"},{"text":"\n4. DWR filter is needed to check if DWR call is allowed? ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" 1. PHR users do not have permanent openmrs privileges ","type":"text"},{"type":"hardBreak"},{"text":"\n2. PHR users are given temporary openmrs privileges once logged in ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"},{"text":"Controller only security","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" 1. No need to hold temporary privileges for a prolonged time ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" 1. Java code change is needed to bring in new modules into PHR application ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" including controllers, servlet, dwr, etc. ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" 1. Non-PHR pages are sufficiently protected by and tags ","type":"text"},{"type":"hardBreak"},{"text":"\n2. PHR users do not have permanent openmrs privileges ","type":"text"},{"type":"hardBreak"},{"text":"\n3. PHR users are given temporary openmrs privileges when making openmrs requests from PHR compliant functions and give away those privileges when finishing the requests ","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"},{"text":"Service only security","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" I. Protect the right data at the right time ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" 1. Java code change is needed to bring in new modules into PHR application and to secure exisitng base OpenMRS services ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" including PHR specific services and other services provided by base OpenMRS and other dependent-upon modules ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" 1. Non-PHR pages are sufficiently protected by and tags ","type":"text"},{"type":"hardBreak"},{"text":"\n2. PHR users do not have permanent openmrs privileges ","type":"text"},{"type":"hardBreak"},{"text":"\n3. PHR users are given temporary openmrs privileges once logged in ","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Instructions for installation and configuration of basic PHR modules (Personal Health Toolkit)","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Install OpenMRS 1.8.3: ","type":"text"},{"text":"https://svn.openmrs.org/openmrs/tags/1.8.3","type":"text","marks":[{"type":"link","attrs":{"href":"https://svn.openmrs.org/openmrs/tags/1.8.3"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Check out and build the general messaging module from: ","type":"text"},{"text":"https://svn.openmrs.org/openmrs-modules/messaging/branches/messaging4all","type":"text","marks":[{"type":"link","attrs":{"href":"https://svn.openmrs.org/openmrs-modules/messaging/branches/messaging4all"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Check out and build the phr (personalhr) module from: ","type":"text"},{"text":"https://svn.openmrs.org/openmrs-modules/personalhr/branches/0.0.3","type":"text","marks":[{"type":"link","attrs":{"href":"https://svn.openmrs.org/openmrs-modules/personalhr/branches/0.0.3"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Check out and build the messagingphr module from: ","type":"text"},{"text":"https://svn.openmrs.org/openmrs-modules/messagingphr","type":"text","marks":[{"type":"link","attrs":{"href":"https://svn.openmrs.org/openmrs-modules/messagingphr"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Check out and build the messaging module from: ","type":"text"},{"text":"https://svn.openmrs.org/openmrs-modules/phrjournal/trunk","type":"text","marks":[{"type":"link","attrs":{"href":"https://svn.openmrs.org/openmrs-modules/phrjournal/trunk"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Login as openmrs administrator, load the messaging, personalhr, messagingphr, and phrjournal modules into openmrs in sequence","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"From the messaging module’s Manage Messaging Gateway administrative page, Start Omail server; Configure Outgoing Email Server and Start the Gateway","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"From the messaging module’s Manage PHR Security Rule and Manage PHR Authorized URL pages, make sure security rules and URL’s are loaded","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Create a PHR admin user with PHR Administrator role","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Create an internal user with PHR Restricted User role (Used for self-registration purpose, must have username: Temporary, password: Temporary8)","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Add the following custom person attribute: Name: Email, class: java.lang.String, description: A person's email address","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Login as a PHR admin user, create a demo PHR Patient user using the Manage Patients/Add Patient command and the Manage Users/Add User command","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Login as a PHR Patient user, you’ll see three tabs in the patient’s dashboard: My Relationships, My Email, My Journal","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"As a PHR patient, you can add a relationship with a valid email address. An invitation will be sent to the provided email address.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The recipient of the invitation can click a URL link embedded in the email to self-register with openmrs as a PHR Restricted user.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"After logging in as a PHR Restricted user, you’ll see in the dashboard My Relationships tab, where the patient who sent you the invitation is listed and whose health information and journal entries may be available depending on the Data Sharing Type granted to you; and My Email tab, where you can send openmrs internal email (OMail) to that patient.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"You can extend PHR Patient dashboard with additional tabs (e.g. My Encounters). Be sure to configure/authorize the new URLs using the PHR Authorized URL form, and guard the jsp pages with or tags.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The default data sharing types include “Sharing Medical”, “Sharing Journal” and “Sharing All”. Additional sharing types are configurable by adding them to the PHR Security Rule form.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Please Note:","type":"text","marks":[{"type":"strong"}]},{"text":" at this point of time, the installation of messagingphr module and phrjournal module may not be stable due to a recent migration from openmrs 1.7.x to 1.8.3. The PHR (the messaging and the personalhr modules) will still function without these two modules though.\n","type":"text"},{"type":"hardBreak"}]}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Frequently Asked Questions:","type":"text"}]},{"type":"paragraph","content":[{"text":"1. In the current PHR code, for the \"restricted users\" what is the process of obtaining a userid/password ? ","type":"text"},{"type":"hardBreak"},{"text":"\n Answer: Patient adds a relationship with a person -> An invitation is sent to that person's email address -> The person clicks a link embedded in the email invitation (with an embeded sharing token, which is similar to a \"unique id\") to accept the invitation -> The person sees PHR login page and clicks the \"First Time User Registration\" link -> The person enters basic information to create a PHR restricted user account, which has a link to the patient through the sharing token he received.","type":"text"},{"type":"hardBreak"},{"text":"\n ","type":"text"},{"type":"hardBreak"},{"text":"\n2. If the \"restricted user\" is a physician whose email is ","type":"text"},{"text":"drtanmaymahapatra@yahoo.com","type":"text","marks":[{"type":"link","attrs":{"href":"https://wiki.openmrs.org/redir.aspx?C=30c4fe126e744a6cae8a8b78627b2406&URL=mailto%3adrtanmaymahapatra%40yahoo.com"}}]},{"text":" and two patients share his/her medical record whether the physician need to get two seperate userid or one userid will work?","type":"text"},{"type":"hardBreak"},{"text":"\n Answer: the physician only needs to do the registration once. The second time he received an invitation, he can simply clicks the link and login to OpenMRS with his previously created user account, and a link to the new patient will automatically be added to his account.","type":"text"},{"type":"hardBreak"},{"text":"\n ","type":"text"},{"type":"hardBreak"},{"text":"\n3. It will be ideal if the physician use one single id. If the physician use one single id then he/she should be able to use \"find patient\" functionality?","type":"text"},{"type":"hardBreak"},{"text":"\n Answer: He will be able to \"find\" all patients who he has a relationship with, as those patients will all be listed under his relationship tab.","type":"text"},{"type":"hardBreak"},{"text":"\n ","type":"text"},{"type":"hardBreak"},{"text":"\n4. Currently, in openmrs (@ sign and as such emailid) is not allowed as userid. There is a ticket to fix this in core OpenMRS. We will surely like to fix this or at-least make it a part of this module, so that email id is allowed as user id.","type":"text"},{"type":"hardBreak"},{"text":"\n ","type":"text"},{"type":"hardBreak"},{"text":"\nAnswer: Good point.","type":"text"},{"type":"hardBreak"},{"text":"\n ","type":"text"},{"type":"hardBreak"},{"text":"\n5. I am assuming it is possible to make a omod file for this module and this moculde can be imported in an existing OpenMRS implementation. Please confirm.","type":"text"},{"type":"hardBreak"},{"text":"\n Answer: Yes.","type":"text"},{"type":"hardBreak"},{"text":"\n ","type":"text"},{"type":"hardBreak"},{"text":"\n6. When the phr omod file is imported in an existing OpenMRS implementation what will be the login URL for the patients?","type":"text"},{"type":"hardBreak"},{"text":"\n Answer: There are two login pages, one for base openmrs users (/openmrs/index.htm), the other for PHR users (/openmrs/phr/index.htm). You can login as a PHR user or non-PHR user through either login page, the program will direct you to the correct pages based on your role.","type":"text"},{"type":"hardBreak"},{"text":"\n ","type":"text"},{"type":"hardBreak"},{"text":"\n7. Current login URL for the Admin and Physicians are :","type":"text"},{"text":"http://117.194.129.238:8080/openmrs","type":"text","marks":[{"type":"link","attrs":{"href":"https://wiki.openmrs.org/redir.aspx?C=30c4fe126e744a6cae8a8b78627b2406&URL=http%3a%2f%2f117.194.129.238%3a8080%2fopenmrs"}}]},{"type":"hardBreak"},{"text":"\nThis one already have a link of \"I forgot my password\". Whether it will be the same urls, with the additional links of \"First Time registration to request an unique id\" and \"Create a userid if you have an unique id\"?","type":"text"},{"type":"hardBreak"},{"text":"\n ","type":"text"},{"type":"hardBreak"},{"text":"\nOR","type":"text"},{"type":"hardBreak"},{"text":"\n ","type":"text"},{"type":"hardBreak"},{"text":"\nwill it be a seperate URLlike : ","type":"text"},{"text":"http://117.194.129.238:8080/openmrs/phr/","type":"text","marks":[{"type":"link","attrs":{"href":"https://wiki.openmrs.org/redir.aspx?C=30c4fe126e744a6cae8a8b78627b2406&URL=http%3a%2f%2f117.194.129.238%3a8080%2fopenmrs%2fphr%2f"}}]},{"text":" with the three links as \" I forgot my password\", \"First Time registration to request an unique id\" and \"Create a userid if you have an unique id\"","type":"text"},{"type":"hardBreak"},{"text":"\n Answer: The two extra links ( \"First Time registration to request an unique id\" and \"Create a userid if you have an unique id\") should be added to the /openmrs/phr/ page. ","type":"text"},{"type":"hardBreak"},{"text":"\n ","type":"text"}]}],"version":1}

Browser not supported