本文件描述了指定访问EHR数据所需权限的方法。该方法构成了ISO 13606-1中定义的总体EHR通信体系结构的一部分。 本文件旨在解决与EHR通信有关的独特要求，并表示和传达将通知访问决策的EHR特定信息。它还提到了适用于EHR通信的一般安全要求，并指出了技术解决方案和标准，这些解决方案和标准详细说明了满足这些安全需求的服务。 注:与EHR通信无关的EHR系统的安全要求不在本文件范围内。

This document describes a methodology for specifying the privileges necessary to access EHR data. This methodology forms part of the overall EHR communications architecture defined in ISO 13606-1. This document seeks to address those requirements uniquely pertaining to EHR communications and to represent and communicate EHR-specific information that will inform an access decision. It also refers to general security requirements that apply to EHR communications and points at technical solutions and standards that specify details on services meeting these security needs. NOTE Security requirements for EHR systems not related to the communication of EHRs are outside the scope of this document.