WHO SMART Trust
1.1.6 - CI Build

WHO SMART Trust, published by WHO. This guide is not an authorized publication; it is the continuous build for version 1.1.6 built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/WorldHealthOrganization/smart-trust/tree/fix/signerCertificate-to-trustedCertificate and changes regularly. See the Directory of published versions

## System Actors

### Actors

Actors produce, manage, or act on health information. Actors relevant to the SMART Trust Network are as follows.

#### Holder

A Holder is an individual that has Verifiable Digtial Health Certificate in their possesion, received from an Issuer. The Holder may choose to share the Verifiable Digital Health Certificate with a Receiver.

This actor fulfills the following requirements:

- Provide Verifiable Digital Health Certificate
- Receive Verifiable Digital Health Certificate
- Request Verifiable Digital Health Certificate

#### Issuer

An Issuer a system authorized by a Trust Network Participant to generate Verifiable Digital Health Certificates which are provided to a Holder. An Issuer is responsible for generating the content that is digitally signed within the Verifiable Digital Health Certificate. In order to sign this content, an Issuer should either itself be a Document Signer or utilize a Document Signer service, as authorized by the jurisdicitonal policy.

This actor fulfills the following requirements:

- Issue Verifiable Digital Health Certificate
- Publish business rules
- Publish Cert Logic business rules
- Publish HL7 FHIR business rules

#### Receiver

A Reciever is a system authorized by a Trust Network Participant to receive from a Holder a Veritifable, verify and utilize the content within.

This actor fulfills the following requirements:

- Retrieve business rules
- Retrieve Cert Logic compatible business rules
- Retrieve HL7 FHIR compatible business rules
- Utilize a Verifiable Digital Health Certificate

#### Trust Network Anchor

Trust Anchor which receives and distributes PKI-material within a Trust Network

This actor fulfills the following requirements:

- Distribute business rules
- Distribute CertLogic business rules
- Distribute FHIR business rules
- Distribute PKI material
- Distribute PKI material via API
- Distribute PKI material as DID
- Receive business rules
- Receive CertLogic business rules
- Receive HL7 FHIR business rules
- Receive PKI material
- Receive PKI material via API
- Receive PKI material as DID
- Retrieve PKI material
- Retrieve PKI material via API
- Retrieve PKI material as DID

#### Trust Network Participant

Trust Network Participant which publishes and or receives PKI-material within a Trust Network

This actor fulfills the following requirements:

- Publish PKI material
- Publish PKI material via API
- Publish PKI material as DID
- Retrieve PKI material
- Retrieve PKI material via API
- Retrieve PKI material as DID

#### Business Rules Library

Trusted service, provided by a node within a trust network, to share business rules using Clinical Quality Language (CQL) specification.

#### Product Catalogue

Used to manage and publish product master data for health products, devices and commodities that may be referenced in a Verifiable Digital Health Certificates.

#### Terminology Service

Used to manage and publish mappings between various local code systems and required vocabularies that are utilized Verifiable Digital Health Certificates.