FHIR 資訊閘道
透過集合功能整理內容
你可以依據偏好儲存及分類內容。
前往 GitHub 查看原始碼
部署數位健康解決方案時，保護病患資料隱私權至關重要。
FHIR Info Gateway 可讓開發人員在處理 FHIR 資料時，強制執行機構角色存取權控管 (RBAC) 政策。
FHIR Info Gateway 是反向 Proxy，會透過檢查對 FHIR 網址或搜尋查詢的要求，來控制用戶端對伺服器上的 FHIR 資源存取權。FHIR 資訊閘道在與任何 OpenID Connect 相容的識別資訊提供者 (IdP) 和授權伺服器 (AuthZ) 搭配使用時，就會啟用用戶端應用程式與 FHIR 伺服器之間的授權和存取權控管功能。它目前支援 Keycloak 做為 IDP+AuthZ 提供者，而且已通過 FHIR 伺服器的 HAPI FHIR 或 Cloud Healthcare API FHIR 儲存庫測試。
FHIR Info Gateway 功能包括：
- 能與 FHIR 相容的伺服器搭配使用的獨立服務
- 用於定義存取權檢查工具的外掛程式架構，以便實作實作設定
- 封鎖/封鎖特定查詢，例如停用彙整功能
前往 GitHub 的開發人員說明文件。
除非另有註明，否則本頁面中的內容是採用創用 CC 姓名標示 4.0 授權，程式碼範例則為阿帕契 2.0 授權。詳情請參閱《Google Developers 網站政策》。Java 是 Oracle 和/或其關聯企業的註冊商標。
上次更新時間：2025-07-25 (世界標準時間)。
[null,null,["上次更新時間：2025-07-25 (世界標準時間)。"],[[["\u003cp\u003eFHIR Info Gateway enhances patient data privacy by enabling role-based access control for FHIR data.\u003c/p\u003e\n"],["\u003cp\u003eIt acts as a reverse proxy, verifying client authorization against an OpenID Connect compliant Identity Provider before granting access to FHIR resources.\u003c/p\u003e\n"],["\u003cp\u003eThe gateway is compatible with various FHIR servers and offers a flexible architecture for customizing access control implementations.\u003c/p\u003e\n"],["\u003cp\u003eDevelopers can leverage query filtering to further refine data access and security policies.\u003c/p\u003e\n"]]],["The FHIR Info Gateway is a reverse proxy that enforces role-based access control (RBAC) for FHIR data, ensuring patient data privacy in digital health solutions. It controls client access to FHIR resources by verifying authorization against requests to a FHIR URL or search query. It is compatible with OpenID Connect Identity Providers and Authorization servers. The Gateway features a pluggable architecture for access-checkers and supports query filtering, allowing control over client interactions with FHIR-compliant servers like HAPI FHIR or Cloud Healthcare API FHIR store.\n"],null,["# FHIR Info Gateway\n\n[View source on Github](https://github.com/google/fhir-gateway)\n\nWhen deploying digital health solutions, preserving patient data privacy is key.\n\nThe *FHIR Info Gateway* makes it easier for developers to enforce organizational\nrole based access control (RBAC) policies when working with FHIR data.\n\nFHIR Info Gateway is a reverse proxy which controls client access to FHIR\nresources on a server by checking requests for authorization to a FHIR URL or\nsearch query. FHIR Info Gateway enables authorization and access-control between\na client application and a FHIR server when used along with any [OpenID\nConnect](https://openid.net/connect/) compliant Identity Provider\n(IdP) and Authorization server (AuthZ). It currently supports Keycloak as the\nIDP+AuthZ provider and has been tested with [HAPI\nFHIR](https://hapifhir.io/) or [Cloud Healthcare API FHIR\nstore](https://cloud.google.com/healthcare-api/docs/concepts/fhir)\nas the FHIR server.\n\nFHIR Info Gateway features include:\n\n- A stand-alone service that can work with FHIR compliant servers\n- A pluggable architecture for defining an access-checkers to allow for implementation configurability\n- Query filtering to block/allow specific queries such as for disabling joins\n\nGo to [developer documentation on\nGitHub](https://github.com/google/fhir-gateway/wiki)"]]
