*Attendees*
Dave Damassa, Tufts
Bill Gordon, U. Cincinnati
Bill Weems, UT-HSCH
Barry Ribbeck, UT-HSCH
Jere Retzer, OHSU
Paul Jolly, AAMC
Keith Hazelton, U. Wisconsin
Morgan Passiment, AAMC
Jeanette Fielden, Internet2
Steve Olshansky, Internet2
Mary Kratz, Internet2
Renee Frost, Internet2

*Discussion*
Dave gave a quick update on TUSK. They are starting to make plans for the Shibboleth installation.

The windows version of Shibboleth will be ready for release within the next few weeks.

Bill Gordon provided a status update for U. Cincinnati. After prioritizing software projects under the IAIMS grant they've identified cross-institutional logins as part of the core functionality. The tentative schedule for a small pilot is December. U. Wisconsin and UT-HSCH are possible pilot partners. They will need assistance with installing Shibboleth.

Morgan stated that AAMC is looking at how they would implement the AAMC lookup and hope to have an answer in the near future.

At UT-HSCH they are looking at how to Shibbify the residency evaluation system discussed in previous calls and what mechanism they can use to do that without changing the applications themselves. These are 3-tier web
applications using the iPlanet application server with an Oracle database in the background and it's all driven off the directory
service. The graduate medical education information system is the personnel system for residents and in essence feeds the enterprise wide directory service. All authentication for evaluations is LDAP username and password based. Administrator access is by use of a digital id. By this fall three-quarters of the medical students will have digital ids and use USB tokens. A year from now everyone will be required to use a digital id. The real attraction of adding Shibboleth is simplifying how non-employees are granted access to the system to do resident evaluations.
[AI] Keith and Barry will co-ordinate by e-mail getting the right technical people involved in the project.

At U. Cincinnati they have a system that allows people to evaluate individual encounters as well as cumulative evaluations. It is currently used for the college of medicine students, but can be run for residents as well and is PDA enabled.

Bill Weems introduced the topic of patient billing and HIPAA implications. HIPAA regulations have made exchanging restricted
information to partners that are not part of the organization an issue. All the requirements with respect to certificate policy, certificate practice statements, trust agreements, etc. is creating difficulty with using PKI since that is not their area of expertise.
[AI] Bill W. will write a description of the HIPAA issue up for the MedMid list.

There was discussion of how to start identifying policy issues and where they need to be addressed. The policy board for the federations will start meeting in August and it would be very useful to have a list of issues and recommendations to present to them. There is general information on federations at http://middleware.internet2.edu/foo.
[AI] It was agreed that those attending the PKI conference in Snowmass would get together to discuss possible policy issues. Keith will coordinate.

The next call is August 7, 2003.

Action Items:
[AI] Keith will coordinate meeting at PKI conference in Snowmass to discuss policy issues.
[AI] Bill W. will write a description of the HIPAA and billing issue and mail to the MedMid list.
[AI] Keith and Barry will coordinate technical assistance in how to Shibbify their evaluation system.