Skip to content
This repository was archived by the owner on Oct 6, 2025. It is now read-only.

Process Deployment and Configuration v0.3.2

Jump to bottom
Reto Wettstein edited this page Jun 20, 2021 · 8 revisions

The process can be deployed by dropping the process-plugin-jar into the the DSF BPE folder /opt/bpe/app/process.

The processes translate and receive are not needed in DIC.

All configurations, depending on the organization type, can be set in the file /opt/bpe/app/conf/config.properties. A detailed description of the configuration parameters can also be found in the release notes.

DIC Configuration

Prerequisite:

CRR public-key location (4096 Bit RSA PEM encoded file expected):

  • de.netzwerk_universitaetsmedizin.codex.crr.publicKey --> ask CRR for public-key

DIC GECCO FHIR repository:

  • de.netzwerk_universitaetsmedizin.codex.fhir.serverBase (http...)
  • de.netzwerk_universitaetsmedizin.codex.fhir.username (if needed)
  • de.netzwerk_universitaetsmedizin.codex.fhir.password (if needed)
  • de.netzwerk_universitaetsmedizin.codex.fhir.bearerToken (if needed)

If the DIC GECCO FHIR repository is not configured, the process generates demo data for testing purposes. This test data contains for each provided DIC pseudonym 1 FHIR Patient ressource, 1 FHIR Condition ressource and 1 FHIR Observation ressource.

fTTP connection to resolve Bloom Filters (only needed if Patient resources in the DIC GECCO FHIR repository contain a Bloom Filter):

Ask the fTTP for the needed values, certificates and key's.

  • de.netzwerk_universitaetsmedizin.codex.fttp.serverBase(http...)
  • de.netzwerk_universitaetsmedizin.codex.fttp.trustStore (PEM encoded file with one or more ca certificates)
  • de.netzwerk_universitaetsmedizin.codex.fttp.certificate (PEM encoded file with single client certificate)
  • de.netzwerk_universitaetsmedizin.codex.fttp.privateKey (PEM encoded, not encrypted key file)
  • de.netzwerk_universitaetsmedizin.codex.fttp.basicAuthUsername (if second factor is not based on IP address)
  • de.netzwerk_universitaetsmedizin.codex.fttp.basicAuthPassword (if second factor is not based on IP address)
  • de.netzwerk_universitaetsmedizin.codex.fttp.apiKey
  • de.netzwerk_universitaetsmedizin.codex.fttp.target (e.g. dic_heidelberg)

If the fTTP connection is not configured and the process finds a Bloom Filter in a FHIR Patient ressource, a demo DIC pseudonym with the value source2/original2 is generated and used.

Internet access via corporate proxy server:

  • org.highmed.dsf.bpe.fhir.remote.webservice.proxy.schemeHostPort (if needed, http...)
  • org.highmed.dsf.bpe.fhir.remote.webservice.proxy.username (if needed)
  • org.highmed.dsf.bpe.fhir.remote.webservice.proxy.password (if needed)

Local consent provider:

  • No implementation yet.

Process exclude config:

  • org.highmed.dsf.bpe.process.excluded=dataTranslate/<version>,dataReceive/<version>

Test Data

There exist two GECCO FHIR transaction Bundles with test data that can be used in the DIC GECCO FHIR repository for testing purposes:

  • A transaction Bundle containing demo data based on a FHIR Patient ressource with a Bloom Filter identifier can be found here
  • A transaction Bundle containing demo data based on a FHIR Patient ressource with a DIC pseudonym identifier can be found here

GTH Configuration

fTTP connection to resolve CODEX pseudonyms based on DIC pseudonyms:

  • de.netzwerk_universitaetsmedizin.codex.fttp.serverBase (http...)
  • de.netzwerk_universitaetsmedizin.codex.fttp.trustStore (PEM encoded file with one or more ca certificates)
  • de.netzwerk_universitaetsmedizin.codex.fttp.certificate (PEM encoded file with single client certificate)
  • de.netzwerk_universitaetsmedizin.codex.fttp.privateKey (PEM encoded, not encrypted key file)
  • de.netzwerk_universitaetsmedizin.codex.fttp.basicAuthUsername (if second factor is not based on IP address)
  • de.netzwerk_universitaetsmedizin.codex.fttp.basicAuthPassword (if second factor is not based on IP address)
  • de.netzwerk_universitaetsmedizin.codex.fttp.apiKey

Process exclude config:

  • org.highmed.dsf.bpe.process.excluded=dataTrigger/<version>,dataSend/<version>,dataReceive/<version>

CRR Configuration

Prerequisite:

CRR private-key location (4096 Bit RSA PEM encoded, not encrypted file expected:

  • de.netzwerk_universitaetsmedizin.codex.crr.privateKey

Generate a key-pair using:

  • openssl genrsa -out keypair.pem 4096
  • openssl rsa -in keypair.pem -pubout -out crr_public-key.pem
  • openssl pkcs8 -topk8 -inform PEM -outform PEM -nocrypt -in keypair.pem -out crr_private-key.pem

CRR GECCO FHIR repository:

  • de.netzwerk_universitaetsmedizin.codex.fhir.serverBase (http...)
  • de.netzwerk_universitaetsmedizin.codex.fhir.username (if needed)
  • de.netzwerk_universitaetsmedizin.codex.fhir.password (if needed)
  • de.netzwerk_universitaetsmedizin.codex.fhir.bearerToken (if needed)

Process exclude config:

  • org.highmed.dsf.bpe.process.excluded=dataTrigger/<version>,dataSend/<version>,dataTranslate/<version>

Clone this wiki locally