1 Requirements
2 Specification
3 Validations
- 3.1 Authorization
- 3.2 Validate digital signature
- 3.3 Validate request using JSON Schema
- 3.4 Validate Legal Entity Type
- 3.5 Validate service request
4 Service logic
- 4.1 Send SMS notification

Requirements

Створення направлення

Specification

Create Service Request

Validations

Authorization

Verify the validity of access token
- Return (401, 'unauthorized') in case of validation fails
Verify that token is not expired
- in case of error - return (401, 'unauthorized')
Check user scopes in order to perform this action (scope = 'service_request:write')
1. Return (403, 'invalid scopes') in case of invalid scope(s)

Validate digital signature

Decode content that is encrypted in an electronic digital signature.
Use Digital signature WS. Method checks digital signature and returns result.
See service specification

Ensure that digital signature is valid
Validate that requester of service request is a current user

2.1. Get token metadata

Extract user_id, client_id, client_type

2.2. Determine the party_id associated with this user_id

SELECT pu.party_id
FROM party_users pu
WHERE pu.user_id = :user_id;

2.3. Determine employees related to this party_id in current MSP

SELECT e.id
FROM employees e
WHERE e.party_id = :party_id
AND e.legal_entity_id = :client_id;

2.4 Ensure that $.requester.identifier.value matches with user employees

Validate that DS belongs to the requester of encounter

3.1. Determine the party_id associated with requester ($.requester.identifier.value)

SELECT p.tax_id
FROM employees e, parties p
WHERE e.party_id = p.id
AND e.id = :requester;

Validate request using JSON Schema

Return 422 with the list of validation errors in case validation fails

Validate Legal Entity Type

Validate legal entity from token: legal_entities.type should be in me_allowed_transactions_le_types and legal_entities.status =='active'

Validate service request

Validate that service request ID is unique
1. $.id must be unique
  1. in case of error return 409 - "Service request with such id already exists"
Requisition is a common identifier for the group of service requests and it must matches with one of the patient's episode of care number
1. $.requisition must match with patient's episode of care number
  1. in case of error return 409 - "Incorrect requisition number"
Service request category must refer to a valid dictionary
1. $.category.coding[*].system == "eHealth/SNOMED/service_request_categories"
  1. in case of error return 409 "Incorrect service request category"
2. in case service was defined as a code (not a service_group) validate service_request.category=service.category from $code.identifier.value
  1. in case error return 422, "Category mismatch"
3. if category in (hospitalization, transfer_of_care), do not validate service_request.category=service.category from $code.identifier.value
Patient must be active
1. $.patient.identifier.type.coding[*].system == "eHealth/resources"
2. $.patient.identifier.type.coding[*].code == "patient"
3. $.patient.identifier.value refer to active MPI (is_active == true and status == 'active')
4. if category = transfer_of_care, patient could be person and preperson
  1. in case of another category for preperson - return 422 (Category of service request is not allowed for prepersons)
Context must be an active encounter
1. $.context.identifier.type.coding[*].system == "eHealth/resources"
2. $.context.identifier.type.coding[*].code == "encounter"
3. $.context.identifier.value refer to existing encounter (status == 'finished')
4. if category = transfer_of_care,
  1. validate encounter.hospitalization.Discharge_Disposition='transfer_general', in case error return 422, "Context is not valid for service request with type $type"
Occurence is a valid date-time in the future
1. $.occurrenceDateTime
  1. $.occurrence_date_time - ISO date must be greater current date-time
2. $.occurrencePeriod.start
  1. $.occurrence_period.start - ISO date must be greater than current date-time
  2. $.occurrence_period.end - ISO date must be greater than current date-time and greater than $.occurrencePeriod.start
Authored On is a valid date-time in the past
1. $.authored_on - ISO date must be less than current date-time
Requester_employee must be active employee within current legal entity
1. $.requester_employee.identifier.type.coding[*].system == "eHealth/resources"
2. $.requester_employee.identifier.type.coding[*].code == "employee"
3. $.requester_employee.identifier.value refer to active employee within current legal entity (employee.status == approved and employee.is_active == true and employee.legal_entity_id == token.client_id and employee.type=DOCTOR OR SPECIALIST)
Requester is one of current user's employee
1. in case of error return 422 "User is not allowed to create service request for the employee"
Requester_legal_enity must be current legal enity
Supporting info must refer to a valid medical events object (Episode of Care) within specified patient.
1. $.supporting_info.identifier.type.coding[*].system == "eHealth/resources"
  1. in case of error return 409 "Incorrect supporting info"
Reason reference must refer to a valid medical events object (Observation, Condition) within specified patient.
1. $.reason_reference.identifier.type.coding[*].system == "eHealth/resources"
2. $.reason_reference.identifier.type.coding[*].code in ("condition", "observation")
  1. in case of error return 409 "Incorrect reason reference"
Permitted Episode of care must refer to a valid medical events object (Episode of Care) within specified patient.
1. $.permitted_episodes.identifier.type.coding[*].system == "eHealth/resources"
2. $.permitted_episodes.identifier.type.coding[*].code == "episode_of_care"
  1. in case of error return 409 "Incorrect permitted episode"
Validate that permitted episodes is not specified in case of category "laboratory_procedure"
1. in case of error 422 "Permitted episodes are not allowed for laboratory category of service request"
Validate expiration_date is in future
1. in case of error return 422 "Expiration date can not be in past"
Validate code is an existing service or service group that is allowed to be used in service_request
Note. For service_request.code pass "service", "service_group"
1. in case not found or is_active == false return 422 "Service(Service group) not found"
2. if request_allowed==false return error 422 "Request is not allowed for this service"
3. in case based_on passed in request
  1. If service_requests.code.identifier.value is service, validate $based_on[].activity.code.identifier.value = service_requests.code.identifier.value
    1. in case error return 409, "Service in care plan activity differ from service in service request"
  2. If service_requests.code.identifier.value is service_group, validate $based_on[].activity.code.identifier.value = service_requests.code.identifier.value
    1. in case error return 409, "Service group in care plan activity differ from service group in service request"
  3. if service_requests.code.identifier.value is service/service group, validate $based_on[].activity.code.identifier.value is service/service group
    1. in case error return 422, "Activity referes to '#{service/service group}' but service request refers to '#{service group/service}'"
If program was specified, validate it is an existing service program (type=service)
1. in case not found or is_active==false return 422 "Program not found"
2. in case type!= service return 422 "Invalid program type"
3. check if medical_programs.medical_program_settings.care_plan_required == true then the request should contain a based_on with care plan and activity that contains the same medical program
  1. in case of error return 422 with msg ("Care plan and activity with the same program should be present in request")
  2. check that program equal to $.activity[].program
    1. in case of error return 422 with msg ("Program from activity should be equal to program from request")
If program was specified, validate that service(or service_group) is an active member of the program
1. Select request_allowed, is_active from PRM.program_services where service_id(or group_id) == $.signed_content.code.identifier.value and program_id=$.program.identifier.value
  1. if not found or is_active==false return 422 "Service is not included in the program"
  2. if request_allowed==false return 422 "Service request is not allowed for this service(service_group) in this programm"
Validate performer
1. if category = transfer_of_care,
  1. performer is sent, in case error return 422, "performer is mandatory for category `transfer_of_care`"
  2. performer is real LE with status=Active and is_Active=true, in case error, return 422, "performer is not active legal entity"
validate LocationReference
1. if category = transfer_of_care,
  1. LocationReference is real division with type in (CLINIC, LICENSED_UNIT,AMBULANT_CLINIC,FAP) and status=Active and is_active=true, in case error return 422, "LocationReference is not an active division"
  2. LocationReference division.legal_entity_id=Performer, in case error return 422, "Division does not belong to performer legal entity"
Validate PerformerType
1. if category = hospitalization
  1. PerformerType is sent, in case error return 422, "PerformerType is mandatory for category hospitalization"
  2. PerformerType is a code from dictionary.SPECIALITY_TYPE and match config file 'SERVICE_REQUEST_HOSPITALIZATION_SPECIALITY_TYPES', in case error return 422, "PerformerType=$PerformerType is forbidden for category hospitalization"
Validate based_on
1. If submitted, check field has array with two values of Reference type: one is valid Care plan resource, another - Activity resource.
  1. in case of error return 422 with msg ("expected a minimum of %{min} items but got %{actual}")
2. Verify Care plan:
  1. It should belong to the same person as set in service request
    1. in case of error return 422 with msg ("Care plan with such id is not found")
  2. It should be in active status
    1. in case of error return 422 with msg ("Care plan is not active")
  3. Care plan's period end (if exist) should be greater than current date or equal.
3. Verify submitted Activity:
  1. It belongs to the Care plan.
  2. It has activity.detail.kind=service_request; activity.detail.product_reference=service_request.code[].value
    1. in case of error return 422 with msg ("Invalid activity kind")
  3. It has scheduled, in_progress status
    1. in case of error return 422 with msg ("Invalid activity status")
  4. If activity.program submitted than $.service_request.program with equal value should be present in request
    1. in case of error return 409 with msg ('Program from activity should be present in request')
4. Verify activity period:
  1. If it has scheduled_timing:
    1. if bounds_period.end defined then check it greater than current date or equal.
  2. If it has scheduled_period:
    1. if scheduled_period.end defined then check it greater than current date or equal.

Service logic

Generate requisition number (see Human readable requisition number) based on encounter id
Save signed content to media storage
Save data to corresponding collection in DB
Save link to the signed content in service request storage
If program was specified, change program_processing_status to New

Send SMS notification

If patient's default authentication method determined by Determination of a default authentication method and return person's active auth_methods is OTP or third_person.OTP, send SMS to that patient with requisition number

In order to optimize the costs, only one sms should be sent within one encounter. So that send sms only for the first service request for specific encounter

Search for service requests with the same requisition number
1. if there is at least one service request with such number - do not send sms
2. if no service requests found - send sms to the patient

E-Health

(RC-1 MRIN)Create Service Request