Tech Talk: APIs in Healthcare: How to Increase Interoperability and Security With FHIR and CA API Management

1. World®
’16
Tech Talk: APIs in Healthcare: How to
Increase Interoperability and Security
With FHIR and CA API Management
David Bressler - VP, Vertical Markets, API Management - CA Technologies
(@djbressler)
DO3T21T
DEVOPS

2. 2 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
© 2016 CA. All rights reserved. HL7 and FHIR are the registered trademark of Health Level Seven International. Twitter is a trademark of
Twitter, Inc. or its affiliates. All trademarks referenced herein belong to their respective companies.
The content provided in this CA World 2016 presentation is intended for informational purposes only and does not form any type of
warranty. CA makes no warranties or promises regarding HIPAA compliance with respect to any CA product or service. The information
provided by a CA partner and/or CA customer has not been reviewed for accuracy by CA.
For Informational Purposes Only
Terms of this Presentation

3. 3 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Abstract
With the emergence of the Fast Healthcare Interoperability Resources (FHIR) API standard from
HL7, the healthcare industry is poised for a major change in how it shares and secures medical,
patient, and financial data. To achieve true interoperability in the future, all health organizations
- from the largest provider networks to the smallest mHealth startups - will have to understand
and adopt an API strategy. In this session, we will offer a hands-on demo and discussion of FHIR
APIs being secured, managed, and used through CA API Management SaaS, the cloud version of
our analyst-acclaimed technology.
David
Bressler
CA Technologies
VP, Vertical Markets,
API Management

4. 4 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Agenda
APPLICATION ECONOMY IMPACT ON HEALTHCARE PROVIDERS
API MANAGEMENT AS A MAGIC MULTIPLIER
CA API MANAGEMENT DEVELOPER PORTAL FOR THE FHIR STANDARD
SMART ON FHIR POLICY SUPPORT
1
2
3
4

5. 5 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

6. 6 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Customer Experience Drives Revenue Growth
Revenue Growth for Individual Companies in Select Industries, 2010-2014
"Does Customer Experience Really Drive Business Success?" Forrester Research, Inc., July 15, 2015
Reference Link: Forrester

7. 7 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
A Great
Customer
Experience
Eliminates
Friction

8. 8 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
The Platform
Informs the
Experience

9. 9 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Deep Security
Identity is key
Health history can’t be reset
Mobile security models differ
from web security models
Security as part of the app, in
addition to being part of the
infrastructure
More Software
More experiences
More target persona
More opportunity to engage as
a result of having a “computer
in your pocket”
Crafted with Care
The competition are small
companies going deep on a
single experience
Apps are judged very quickly;
looks matter
What Does This Mean for Market Participants?
Everyone Is Impacted – Providers, Payers, Device Manufacturers, Even Large Employers

10. 10 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
REST*
HTTP
TCP
IP
Back End
REST URL
SOAP/WSDL
IDE
Key Value Props
1. Simple URI
(GET/POST/PUT/DELETE)
2. Standards based
3. Decoupled
Check out Twitter’s public API:
https://dev.twitter.com/rest/public
What Is an API?

11. 11 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
What Is the Problem With Silos?
1. Brittle – changes could impact the whole system
2. New ‘experiences’ need to version the whole end-to-end silo
3. Everything is in the app (security, data model, governance)

12. 12 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
API Management Enables Experience Creation at Scale
1. Decouples “apps” and “experiences” from the back end;
requires less coordination, lowers complexity, improves
speed to market
2. Improves ability to create new experiences, capitalize on new
business opportunities, get scale (coverage on the problem)
3. Unbundles security, data model, analytics, governance
API MANAGEMENT…

13. 13 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
CA Mobile App Services
CA API Gateway
CA Mobile API Gateway
CA API Developer Portal
CA Live API Creator • Consume
• Develop
- Entire API
Lifecycle
+ Mobile• Promote
• Acquire
• Define
• Create
• Secure
• Runtime
CA Advanced Authentication
CA Single Sign-On
CA Application
Performance Management
FHIR®
APIs
SMART
on FHIR®
MU3FHIR®
Services
CA API Management - Healthcare
World®
’16© 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD13

14. 14 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Healthcare Developer Sandbox: http://fhir.dev.ca.com
Supporting the HL7® FHIR® Standard
Test FHIR® Server
FHIR® APIS
Conformance Statement
Developers
API Explorer to:
1. explore FHIR® APIs,
2. send test messages,
3. generate code
API Gateway
API Developer Portal
oAuth
Security
Added
Presenter’s note:
Please make sure you're following HL7's trademark guidelines.
http://www.hl7.org/legal/trademarks.cfm?ref=nav
Brand added copyright info to bottom of slide.
HL7 and FHIR are the registered trademarks of Health Level Seven International.

15. 15 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Mobile Security: SMART on FHIR®
Accelerate development, improve security, lower cost
Test FHIR® Server
FHIR APIS
Conformance Statement
API GatewayWeb
WebWeb
Healthcare Mobile/Web Apps
Improving patient care with a more human
technology experience
1.SMART on FHIR®
SMART on FHIR®
Defines a profile involving a set of open specifications to integrate apps with health systems:
• FHIR® for structured data
• OAUT 2.0 for scopes and permissions
• OPenID Connect for Identity
• HTML5 for lightweight UI integration
HL7 and FHIR are the registered trademarks of Health Level Seven International.

16. 16 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Mobile Security: SMART on FHIR®
Accelerate development, improve security, lower cost
Test FHIR® Server
FHIR APIS
Conformance Statement
Mobile API GatewayWeb
WebWeb
Healthcare Mobile/Web Apps
Improving patient care with a more human
technology experience
1.SMART on FHIR®
2.Unique capabilities to improve developer and
patient/doctor experience around security in
MAG SDK
SMART on FHIR®
Defines a profile involving a set of open specifications to integrate apps with health systems:
• FHIR® for structured data
• OAUT 2.0 for scopes and permissions
• OPenID Connect for Identity
• HTML5 for lightweight UI integration
HL7 and FHIR are the registered trademarks of Health Level Seven International.

17. 17 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Mobile Security: SMART on FHIR®
Accelerate development, improve security, lower cost
Test FHIR® Server
FHIR APIS
Conformance Statement
Mobile App ServicesWeb
WebWeb
Healthcare Mobile/Web Apps
Improving patient care with a more human
technology experience
1.SMART on FHIR®
2.Unique capabilities to improve developer and
patient/doctor experience around security in
MAG SDK
3.Mobile acceleration and simplicity through
MAS (FHIR enabled services for things like
appointments and prescription management)
SMART on FHIR®
Defines a profile involving a set of open specifications to integrate apps with health systems:
• FHIR® for structured data
• OAUT 2.0 for scopes and permissions
• OPenID Connect for Identity
• HTML5 for lightweight UI integration
HL7 and FHIR are the registered trademarks of Health Level Seven International.

18. 18 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Questions?

19. 19 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Thank you.
Stay connected at communities.ca.com

20. 20 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
DevOps – API Management and
Application Development
For more information on DevOps – API Management and
Application Development, please visit: http://cainc.to/DL8ozQ