The Office of a National Coordinator for Health Information Technology (ONC) is gratified to announce a Secure API Server Showdown Challenge, that invites meddlesome stakeholders to build a secure, FHIR server regulating stream attention standards, best practices, and recently released healthcare-specific doing beam requirements.
The Secure API Server Showdown Challenge (the “Challenge”) invites meddlesome stakeholders to build a secure, Health Level 7 (HL7®) Fast Healthcare Interoperability Resources (FHIR®) server regulating stream attention technical standards, best practices, and recently released healthcare-specific doing beam requirements, including a Substitutable Medical Apps, Reusable Technology (SMART) on FHIR Authorization technical mandate as specified in a Argonaut Data Query Implementation Guide Version 1.0.0. The Prize Competition will embody of dual stages: a Server Build Stage (“Stage 1”) and a Vulnerability Discovery Stage (“Stage 2”), that will embody dual marks (a “Server Track” and a “Discovery Track”).
Stage 1 participants will need to rise a secure FHIR server that will eventually have a source formula done publicly accessible around open source. A limit of 3 teams’ FHIR servers will be comparison as Stage 1 winners formed on technical judging criteria and their accessibility to attend in Stage 2. If a Stage 1 leader is incompetent to dedicate to completing a entirety of Stage 2’s “Server Track,” afterwards an swap Stage 1 leader will be comparison for Stage 2’s Server Track. Additionally, Stage 1 winners are incompetent to attend in Stage 2’s Discovery Track. Stage 2’s Discovery Track will be a team-based foe that will endowment money prizes formed on a marker of “in-scope” confidence vulnerabilities found in a open source FHIR servers. At a finish of Stage 2, all of a reliable confidence vulnerabilities will be done open to inspire a attention to refurbish a open source FHIR servers. ONC will be obliged for slip and government of a foe in a entirety.
The purpose of this esteem foe is to kindle attention investment and rendezvous in a deployment of “secure” FHIR servers. In addition, we design that this foe will assistance brand potentially different confidence flaws in a formula used to work FHIR servers in industry, as good as strengthen a value of following identified technical confidence best practices. Further, on a completion, we design that stakeholders will have larger entrance to secure, open source FHIR servers that have had their formula bottom serve hardened by this competition’s team-based testing. Ultimately, a idea is to see “ready to use”/“turn-key” secure, FHIR server formula that meets a SMART on FHIR Authorization technical mandate and on that attention stakeholders can build.
- Submission Period: October 10, 2017 – Jan 15, 2018 (by 11:59 p.m. EST)
- Winners Notified: February 5, 2018 (by 11:50 p.m. EST)
- Winners Announced: February 6, 2018 (by 11:50 p.m. EST)
- Registration Period: January 8, 2018 – Feb 5, 2018 (by 11:59 p.m. EST)
- Submission Period: February 19, 2018 – May 25, 2018 (by 11:59 p.m. EDT)
- Winners Notified: June 28, 2018 (by 11:59 p.m. EDT)
- Winners Announced: June 29, 2018 (by 11:59 p.m. EDT)
Pool of prizes consists of $50,000.
Comment this news or article