Page History

...

The Secure API Server Showdown Challenge (the “Challenge”) invites interested stakeholders to build a secure, Health Level 7 (HL7®) Fast Healthcare Interoperability Resources (FHIR®)[1] server using current industry technical standards, best practices, and recently issued healthcare-specific implementation guide requirements, including the Substitutable Medical Apps, Reusable Technology (SMART) on FHIR App Authorization technical requirements as specified in the Argonaut Data Query Implementation Guide Version 1.0.0[2].  The Prize Competition will consist of two stages: the Server Build Stage (“Stage 1”) and the Vulnerability Discovery Stage (“Stage 2”), which will include two tracks (a “Server Track” and a “Discovery Track”).

...

The purpose of this prize competition is to stimulate industry investment and engagement in the deployment of “secure” FHIR servers. In addition, we expect that this competition will help identify potentially unknown security flaws in the code used to operate FHIR servers in industry, as well as reinforce the value of following identified technical security best practices. Further, upon its completion, we expect that stakeholders will have greater access to secure, open source FHIR servers that have had their code base further hardened through this competition’s team-based testing. Ultimately, our goal is to see “ready to use”/“turn-key” secure, FHIR server code that meets the SMART on FHIR App Authorization technical requirements and on which industry stakeholders can build.

...