ISO 21091:2013

Overview

ISO 21091:2013 - Health informatics - Directory services for healthcare providers, subjects of care and other entities - defines minimal, community-focused specifications for healthcare directory services. The standard specifies common directory information and services to support secure exchange of healthcare information across public networks, enabling inter-enterprise, inter-jurisdictional and international communications. It addresses identity, addressing, protocol and security-related needs for organizations, devices, application components, professionals and subjects of care.

Key Topics and Technical Requirements

• Directory schema and object classes: Defines healthcare-specific schema for healthcare persons, organization identities, roles/job functions, groups and distinguished names to support consistent identity representation.
• Security and PKI support: Supports Public Key Infrastructure (PKI) concepts such as certificates, certificate distribution, CRLs, attribute certificates and attribute authorities to maintain a chain of trust for secure communications.
• Access control and confidentiality: Requires controls at branch, object class and attribute levels; recommends clear policies and assignment of administrative roles (e.g., HCOrganizationalRole) to manage read/modify/delete privileges.
• Interoperability and namespaces: Specifies requirements for namespace/tree structure and interoperability to support LDAP client searches, SOA, and interface engines.
• Addresses and communication protocols: Provides specifications for addresses and protocol-related attributes of communication entities to enable routing and secure exchanges.
• Extensibility and optionality: Multiple options are supported but not all are mandatory - implementations can choose features appropriate to their environment.

Practical Applications and Who Uses ISO 21091:2013

ISO 21091 is intended for organizations building or operating healthcare directory services and for those integrating identity and security into health information exchange:

• Health IT architects and system integrators designing directory-enabled EHR, HIE and messaging systems
• PKI managers and security architects implementing certificate registries and LDAP-based lookups
• Directory administrators and operations teams managing users, roles and access controls
• Vendors of clinical systems, messaging gateways and SOA services requiring standardized identity and address information
• Policy-makers and healthcare organizations planning cross-enterprise or international interoperability

Related Standards

• ISO/HL7 27931:2009 (HL7 v2.5 messaging)
• X.509 / ISO/IEC standards referenced for PKI and certificates (see ISO 21091 normative references)
• ISO 7498-2 and other ISO security terminology cited within the document

ISO 21091:2013 is a practical foundation for secure, interoperable directory services in health informatics - enabling trusted identification, authentication and communication across healthcare ecosystems.