ONC selects final winners of API challenge
The Office of the National Coordinator for Health IT has announced final winners of an ONC challenge focused on developing application programming interfaces that enable consumers to share their personal health information safely and securely with providers, family members and other caregivers.
The Phase 3 winners of ONC’s Move Health Data Forward Challenge, the final phase of the competition, are Foxhall Wythe and Live and Leave Well. The two finalists were awarded $50,000 each.
Foxhall Wythe’s Docket is a secure system that enables users to seamlessly store and share data with trusted care professionals, eliminating the need for tedious paper-based patient intake processes. The solution promotes HIPAA compliance through a user-managed access approach and end-to-end encryption for all records, as well as interoperability through HL7’s emerging FHIR standard.
Live and Leave Well’s solution provides both a consumer-mediated exchange of end of life plans and creates a transportable package of data about a person’s wishesd that can be scored and shared with multiple systems using a combination of open APIs and direct integration.
Both Foxhall Wythe and Live and Leave Well leverage OAuth 2.0, an open security standard for token-based authentication and authorization.
“The final winners in the Move Health Data Forward challenge show us that electronic health information can truly be owned by patients and their family members,” says Don Rucker, MD, National Coordinator for Health IT, in a written statement. “We expect these winning apps will open up new ways for Americans to own and manage their health information safely and securely.”
ONC says its Move Health Data Forward Challenge builds on the agency’s work with the Health Relationship Trust (HEART) Workgroup, whose stakeholders are collaborating on the development of a set of privacy and security specifications that enable individuals to control the authorization of access to RESTful health-related data sharing APIs. FHIR leverages RESTful APIs and OAuth-based security to enable data sharing among myriad HIT systems