(g)(10) Standardized API for patient and population services
Smartbox| FHIR API for EHRs comprehensively supports the §170.315(g)(10) Standardized API for patient and population services certification criterion. Here's an overview of how Aidbox covers the key requirements:
Data Response
Aidbox fully supports responding to requests for both single and multiple patients' data according to the required standards:
Implements FHIR R4 (HL7 FHIR Release 4.0.1) as the base standard
Supports the US Core Implementation Guide for single-patient data access
Enables bulk data export using the FHIR Bulk Data Access specification for multiple patients
Supported Search Operations
Aidbox offers robust search capabilities that align with certification requirements:
Supports all mandatory search parameters defined in US Core for single patient queries
Implements the search criteria specified in the Bulk Data Access IG for multi-patient queries
Application Registration
Aidbox provides a flexible authorization server that allows applications to register and obtain credentials for API access
Secure Connection
Secure connections are established using:
OAuth 2.0 and OpenID Connect for patient and user-scoped access
SMART Backend Services authorization for system-scoped access
Authentication and Authorization
Aidbox implements the full SMART App Launch framework, supporting:
First-time connections with refresh token issuance
Subsequent connections using refresh tokens
Token introspection capabilities1
Patient Authorization Revocation
Aidbox allows revoking application access at a patient's request, meeting the 1-hour revocation requirement.
Service Base URL Publication
Aidbox supports the ONC requirement for publishing service base URLs:
URLs are published in FHIR Endpoint resource format
Documentation
Last updated
