The product authenticates its communication partners and nodes; authentication policies must be flexible enough to follow local HDO IT policy, and node authentication is used as necessary when health data is communicated. The HDO needs to manage cross-machine accounts protecting sensitive data and software functions, with stand-alone and central administration, node authentication according to industry standards such as the IHE ATNA profile and X.509 certificates, and detection and prevention of entity falsification for non-repudiation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.