FHIR 信息网关
使用集合让一切井井有条
根据您的偏好保存内容并对其进行分类。
在 GitHub 上查看源代码
在部署数字健康解决方案时，保护患者数据隐私至关重要。
借助 FHIR 信息网关，开发者在使用 FHIR 数据时可以更轻松地强制执行基于组织角色的访问权限控制 (RBAC) 政策。
FHIR 信息网关是一种反向代理，它通过检查对 FHIR 网址或搜索查询的授权请求来控制客户端对服务器上 FHIR 资源的访问。与任何符合 OpenID Connect 的身份提供商 (IdP) 和授权服务器 (AuthZ) 搭配使用时，FHIR 信息网关可在客户端应用与 FHIR 服务器之间实现授权和访问权限控制。它目前支持使用 Keycloak 作为 IDP+AuthZ 提供程序，且已通过 HAPI FHIR 或 Cloud Healthcare API FHIR 存储区作为 FHIR 服务器进行了测试。
FHIR 信息网关功能包括：
- 可与 FHIR 合规服务器搭配使用的独立服务
- 用于定义访问权限检查工具的可插拔架构，以实现实现可配置性
- 查询过滤以阻止/允许特定查询（例如停用联接）
前往 GitHub 上的开发者文档
如未另行说明，那么本页面中的内容已根据知识共享署名 4.0 许可获得了许可，并且代码示例已根据 Apache 2.0 许可获得了许可。有关详情，请参阅 Google 开发者网站政策。Java 是 Oracle 和/或其关联公司的注册商标。
最后更新时间 (UTC)：2025-07-25。
[null,null,["最后更新时间 (UTC)：2025-07-25。"],[[["\u003cp\u003eFHIR Info Gateway enhances patient data privacy by enabling role-based access control for FHIR data.\u003c/p\u003e\n"],["\u003cp\u003eIt acts as a reverse proxy, verifying client authorization against an OpenID Connect compliant Identity Provider before granting access to FHIR resources.\u003c/p\u003e\n"],["\u003cp\u003eThe gateway is compatible with various FHIR servers and offers a flexible architecture for customizing access control implementations.\u003c/p\u003e\n"],["\u003cp\u003eDevelopers can leverage query filtering to further refine data access and security policies.\u003c/p\u003e\n"]]],["The FHIR Info Gateway is a reverse proxy that enforces role-based access control (RBAC) for FHIR data, ensuring patient data privacy in digital health solutions. It controls client access to FHIR resources by verifying authorization against requests to a FHIR URL or search query. It is compatible with OpenID Connect Identity Providers and Authorization servers. The Gateway features a pluggable architecture for access-checkers and supports query filtering, allowing control over client interactions with FHIR-compliant servers like HAPI FHIR or Cloud Healthcare API FHIR store.\n"],null,["# FHIR Info Gateway\n\n[View source on Github](https://github.com/google/fhir-gateway)\n\nWhen deploying digital health solutions, preserving patient data privacy is key.\n\nThe *FHIR Info Gateway* makes it easier for developers to enforce organizational\nrole based access control (RBAC) policies when working with FHIR data.\n\nFHIR Info Gateway is a reverse proxy which controls client access to FHIR\nresources on a server by checking requests for authorization to a FHIR URL or\nsearch query. FHIR Info Gateway enables authorization and access-control between\na client application and a FHIR server when used along with any [OpenID\nConnect](https://openid.net/connect/) compliant Identity Provider\n(IdP) and Authorization server (AuthZ). It currently supports Keycloak as the\nIDP+AuthZ provider and has been tested with [HAPI\nFHIR](https://hapifhir.io/) or [Cloud Healthcare API FHIR\nstore](https://cloud.google.com/healthcare-api/docs/concepts/fhir)\nas the FHIR server.\n\nFHIR Info Gateway features include:\n\n- A stand-alone service that can work with FHIR compliant servers\n- A pluggable architecture for defining an access-checkers to allow for implementation configurability\n- Query filtering to block/allow specific queries such as for disabling joins\n\nGo to [developer documentation on\nGitHub](https://github.com/google/fhir-gateway/wiki)"]]
