A Proposed Security Architecture for Establishing Privacy Domains in Systems ...
The Cleft Project
1. December 2010. Cleft-Net-East Network, box 46, Addenbrookes Hospital
- 1 -
The Cleft Project: the partition of information in a
Reference Model and a knowledge model
This essay will discuss two different modelling approaches with respect to building information
systems software according to underlying design models architecture, ability to communicate
to other systems as well as capacity of adaptation. It will focus on the so-called two-level
model methodology , whereby a higher level of abstraction is considered when it comes to
effectively serializing information about any domain, by means of complete separation of
domain information (actual knowledge) on the one hand, and metadata (information about
the underlying structural representation of the actual knowledge on any domain), on the
other hand.
First and foremost, let us recall the primary purpose of an information system is “to create
and process instances of business entities or concrete day-to-day entities” [3]. Historically,
for the accomplishment of such purpose, software designers have had to acquire the
necessary insights from the knowledge domain in question, so as to being able to hard-code
the domain concepts into the program logic models, thus using knowledge concepts in
attributes of classes and database schemas’ tables and columns. It was the so-called single-
level methodology approach (the classical way). With this methodology, if the system’s
requirements change or, even worse, if they have not been properly coded into the software
logic, there is always a cost in time and money to re-design and, ultimately, re-compile the
source code. In a health domain, the knowledge is constantly evolving and if the system
cannot keep up with the new requirements, it will eventually become obsolete and its utility
will diminish over time.
Another intrinsic problem of this approach is the imposibility of representing the relationships
between the different concepts within an ontology (“an explicit formal specification of the
terms in the domain and relations among them” [5]), but rather facts about the real world.
With this approach, “the software correctness and informational validity are directly
dependent on the definitions of knowledge entities from which the system is constructed” [3].
It is usually inherent to this classical methodology approach a truly vendor dependency,
particularly in proprietry software.
On the contrary, there is an emerging approach named openEHR two-level architecture,
whereby the model separates the semantics of information (Information level or metadata)
from the Knowledge concepts or knowledge level. This approach follows the principles of
RM/ODP methodology [25], which stands for Reference Model/Open Distributed Processing.
2. December 2010. Cleft-Net-East Network, box 46, Addenbrookes Hospital
- 2 -
With so many different implementation technologies and closed standards and communication
protocols out there, there came a point in which the firms realized that trying to individually
reinvent the wheel was not a satisfactory solution. “It was more sensible to jointly work with
other companies towards common solutions that may help each individual enterprise reach
their goals, while sharing the problems, the costs, and the efforts” [25]. The solution was to
reach interoperability and the definition of stable frameworks or reference models [24] that
remain valid over time, for which common agreements on how to do things had to be met. As
stated by the Open Group [24], a reference model “consists of a minimal set of unifying
concepts, axioms, and relationships within a particular problem domain, and is independent of
specific standards, technologies, implementations, or other concrete details”. The openness of
Reference Model/Open Distributed Processing (RM/ODP) lies in the usage of common
frameworks and interfaces for all sytems conforming the abstract model.
The need for interoperability addressed the necessity of internationally agreed standards and
protocols, developed by Standards Developing Organizations (SDOs), with which to define a
lingua franca for information systems to be able to interoperate amongst themselves, with
disregard to technologies, programming languages, platforms and operating systems
deployed in each case.
Following on openEHR approach, this RM/ODP methodology implies the so-called separation of
responsibilities, whereby the different qualitative domains of business processes are divided
into managable parts implemented as standalone systems or services [7]. Additionally, from
the separation of responsibilities follows the RM/ODP separation of viewpoints, of which the
first two, namely informational viewpoint and computational viewpoint, correspond
respectively to the semantics of information (Reference Model or RM), on the one hand, and
the division of the system into interacting objects (the Service Model or SM), on the other,
both of which are part and parcel of the openEHR methodology.
From the point of view of the abstract specifications of the openEHR Specification Project
[18], aside from RM and SM, there is a third formalism named Archetype Model (AM).
Archetypes are structured models of domain content (i.e. diagnostics of a new born baby with
a cleft lip and/or palate), whose purpose is to provide a reusable, interoperable way of
managing data, in such a way it conforms to the generic structures defined in the
corresponding reference model. The instantiation of these generic structures results in
concrete types which, in “classic” information models, are hard-coded in the software. The
breakdown of information systems in domain models (knowledge proper) and information
models (meta-information of the data architecture which will be ultimately used in any
information system), makes it possible for software designers, on the one hand, and domain
experts (clinicians), on the other, to focus their work on their respective areas of expertise:
5. December 2010. Cleft-Net-East Network, box 46, Addenbrookes Hospital
- 5 -
bindings with Description Logic (DL) knowledge representations languages such as SNOMED
CT [14] [19].
It is worth noting that the openEHR EHR is not limited to creating a “patient-centred,
longitudintal, shared care EHR”, as it can be used as a model for a Local Health Record (EPR)
[18], something that East-of-England Cleft-Net-East clinical managed network for cleft
patients could benefit from if applied to its in-house classic relational database. As the
prospects of adding extra functionality to it are rather grim from the single-level methodology
point of view, the aim of this project is to develop an EPR for the Cleft Team following the
principles of the two-level methodology approach. It is envisaged that it would allow for the
system to not only be scalable (able to be enlarged) and extensible (implemented taking into
consideration future growth), but ultimately interoperable with other NHS systems.
One could argue that there is no need to do so considering we are one department only and
therefore assert that the number, complexity and rate of definitional changes should then be
rather small, but we have to bear in mind that Cleft-Net-East Clinical Managed Network
encompasses a variety of health disciplines and specialists that have to be actively involved
during a 20-year care pathway.
The attractiveness of this project lies in the fact we could eventually audit-trail cleft patients’
care journey. Clinical data does not have to be a volatile piece of information that changes
over time without the possibility of recording past patients’ status. In order to get the most of
the data and to be able to identify trends on ever-changing patients’ diagnostic progress, the
EHR model allows traceability of past, present, future and concurrent events.
Last but not least, this project aims to provide standardization for clinical data coding and
provision of care plans guidance in regards to the patient flow, depending upon diagnosis
types and clinical audit trail, thus introducing standardization and accountability for the team
and for the patient.
Author:
Juan-José Blasco Ramos, Activity & Information Manager, Cleft-Net-East
(juanjose.blasco@addenbrookes.nhs.uk, juanjose.blascoramos@nhs.net)
6. December 2010. Cleft-Net-East Network, box 46, Addenbrookes Hospital
- 6 -
Reference list and resources.
[1] Beale T. 2001. Archetypes: Constraint-based Domain Models for Future-proof Information
Systems [pdf] openEHR Foundation:University College London and Ocean Informatics pty, Australia.
Available at: http://www.openehr.org/publications/archetypes/archetypes_beale_web_2000.pdf
[Accessed 7 November 2010].
[2] Beale, T. 2001. Health Information Standards Manifesto, Version 2.5 [pdf] s.l.: Available at:
http://workflow.healthbase.info/monographs/Tom_Beale_his_manifesto.pdf [Accessed 28 November
2010].
[3] Beale, T., 2002. Archetypes: Constraint-based Domain Models for Future-proof Information
Systems. [pdf] Mooloolah, Qld, Australia: OOPSLA 2002 workshop on behavioural semantics. Available
at: http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.147.8835&rep=rep1&type=pdf [Accessed
5 November 2010].
[4] eHealthNews.eu, 2007. Ocean Informatics Provides Clinical Content Modelling Services to the
NHS [Online] (Updated 3 Dec 2007) Available at: http://www.ehealthnews.eu/industry/841-ocean-
informatics-provides-clinical-content-modelling-services-to-the-nhs [Accessed 26 November 2010].
[5] Gruber, T.R., 1993, cited in The Open Group, OASIS SOA-Reference Model Technical Committee
& OMG, 2009. Navigating the SOA Open Standards Landscape Around Architecture. [pdf] s.l.: The Open
Group. Available at: http://www.oasis-open.org/committees/download.php/33412/W096_09-07.pdf
[Accessed 4 November 2010].
[6] Heard, S. Beale T. Freriks, G. Mori, A.R. Pishev O. 2003. Templates and archetypes: how do we
know what we are talking about? [pdf] openEHR Foundation:University College London and Ocean
Informatics pty, Australia. Available at:
http://www.openehr.org/publications/archetypes/templates_and_archetypes_heard_et_al.pdf[Accessed
7 November 2010].
[7] IBM Corporation, 2004. Service-Oriented Architecture expands the vision of Web services, Part
1. [Online] (Updated 21 Apr 2004) Available at:
http://www.ibm.com/developerworks/webservices/library/ws-soaintro.html [Accessed 4 November
2010].
[8] Jullien, N. Zimmermann, JB. 2006. DIME Working papers on Intellectual Property Rights - New
Approaches to Intellectual Property: from Open Software to knowledge-based Industrial Activities [pdf]
Dynamics of Institutions and Markets in Europe. Available at: http://www.dime-
eu.org/files/active/0/IPR-WORKING%20PAPER-5-%20JullienZimmermann-mars14-1.pdf [Accessed 28
November 2010]
[9] Lorraine Laboratory of Research in Information Technology and its Applications (LORIA), 2007
[Online] (Updated 10 May 2007) Available
at:http://smarteiffel.loria.fr/wiki/en/index.php/FAQ#Is_it_possible_to_use_SmartEiffel_for_large.2Fcom
mercial_applications.3F [Accessed 16 November 2010].
[10] Lorraine Laboratory of Research in Information Technology and its Applications (LORIA), 2007
[Online] (Updated 28 May 2007) Available at: http://smarteiffel.loria.fr/wiki/en/index.php/Introduction
[Accessed 16 November 2010].
[11] Meyer, B. 1996. The many faces of inheritance: a taxonomy of taxonomy [pdf] Interacting
Software Engineering, California, USA. Available at:
http://www.civ.utoronto.ca/sect/coneng/i2c/Civ1283/Civ1283-Ref-Final/Civ1283-
Advanced%20Ref/Ontology/TB-Taxonomy%20of%20Taxonomy.pdf [Accessed 28 November 2010].
[12] Ocean Informatics, 2008. Product Description. [pdf] Chatswood, New South Wales, Australia:
Ocean Informatics. Available at: http://www.oceaninformatics.com/media/docs/ProductDescription-
e95c85c6-4197-4700-8c5c-5de85561f009.pdf [Accessed 4 November 2010].
[13] OMG, 2010. Object Constraint Language, Version 2.2 [pdf] Needham, USA: OMG. Available at:
http://www.omg.org/spec/OCL/2.2/PDF [Accessed 16 November 2010].
7. December 2010. Cleft-Net-East Network, box 46, Addenbrookes Hospital
- 7 -
[14] OpenEHR Foundation 2007. Clinician-driven EHRs - the openEHR approach [doc] s.l.: openEHR
workshop MEDINFO2010. Available at:
http://www.openehr.org/wiki/download/attachments/5996988/openEHR_workshop_MEDINFO2010.doc?
version=1&modificationDate=1258953345000 [Accessed 1 December 2010]
[15] OpenEHR Foundation, 2007. Clinical Models Project. [Online] Available at:
http://www.openehr.org/clinicalmodels/project.html [Accessed 29 November 2010]
[16] OpenEHR Foundation, 2007. Introducing OpenEHR [pdf] s.l.: OpenEHR Foundation. Available at:
http://www.openehr.org/releases/1.0/openEHR/introducing_openEHR.pdf [Accessed 1 December 2010].
[17] OpenEHR Foundation, 2007 [Online] (Updated October 2008) ISO EHR Standards. Available at:
http://www.openehr.org/standards/cen.html [Accessed 28 November 2010]
[18] OpenEHR Foundation, 2007. OpenEHR Architecture Overview [pdf] Available at:
http://www.openehr.org/releases/1.0.1/architecture/overview.pdf [Accessed 14 November 2010].
[19] OpenEHR Foundation, 2007. OpenEHR Clinical Knowledge Manager OpenEHR Foundation
[Online] Available at: http://www.openehr.org/knowledge/ [Accessed 1 December 2010].
[20] OpenEHR Foundation, 2007. The openEHR Archetype Model: Archetype Definition Language ADL
1.4 [pdf] s.l.: openEHR Foundation. Available at:
http://www.openehr.org/releases/1.0.1/architecture/am/adl.pdf [Accessed 28 November 2010].
[21] OpenEHR Foundation, 2007. The openEHR Modelling Guide [pdf] s.l.: openEHR Foundation.
Available at: http://www.openehr.org/releases/1.0/architecture/modelling_guide.pdf [Accessed 15
November 2010].
[22] OpenEHR Foundation, 2007. The openEHR Reference Model: Data Types Information Model[pdf]
s.l.: openEHR Foundation. Available at: http://www.openehr.org/svn/specification/TAGS/Release-
1.0.1/publishing/architecture/rm/data_types_im.pdf [Accessed 17 November 2010].
[23] OpenEHR Foundation, 2007. The openEHR Reference Model: Support Information Model[pdf]
s.l.: openEHR Foundation. Available at: http://www.openehr.org/svn/specification/TAGS/Release-
1.0.1/publishing/architecture/rm/support_im.pdf [Accessed 23 November 2010].
[24] The Open Group, Organization for the Advancement of Structured Information Standards
(OASIS) SOA-Reference Model Technical Committee & Object Management Group (OMG), 2009.
Navigating the SOA Open Standards Landscape Around Architecture. [pdf] s.l.: The Open Group.
Available at: http://www.oasis-open.org/committees/download.php/33412/W096_09-07.pdf [Accessed
4 November 2010].
[25] Vallecillo A. 200?. RM-ODP: The ISO Reference Model for Open Distributed Processing [pdf] ETSI
Informática: Universidad de Málaga, Spain. Available at: http://www.enterprise-
architecture.info/Images/Documents/RM-ODP.pdf [Accessed 14 November 2010].
[26] Wasilewski, K., 2008. CREATING MEDICAL RECORDS ON-LINE, Com3021 – 3rd year project.
[pdf] The University of Sheffield: Western Bank Sheffield S10 2TN, UK. Available at:
http://www.dcs.shef.ac.uk/intranet/teaching/projects/archive/ug2008/pdf/aca06kw.pdf [Accessed 26
November 2010].