Agenda Minutes 11
Andres Paglayan Rod Roark James Perry (Tekkno Genius) Mark Leeds, DO Michiel Bosman, MD Samuel T. Bowen, MD David Herman - Certified Public Accountant
1. Call to order
2. Additions to agenda
3. Go over financial and organizational status
Form 1023 - I wrote a letter to Laurie Thrasher of the US IRS asking for expedited consideration of our 501(c)(3) status. I had this reviewed by an attorney familiar with 501(c)(3) status. He felt that are OSMS is clearly operating within the guidelines of a charitable organization. He helped modify the text to point out exactly how much we are giving away.
At the current rate of downloads at 1,550 per month, which is a fair market value of 54 million dollars per month.
I have been in contact by email with Barbara Pullen-Smith, who has expressed her interest in directing me to the Department of Rural Health in North Carolina. She knows Tork Wade, who has also discussed writing grants to the Blue Crosss Blue Shield Founation of North Carolina, Kate B. Reynolds Charitable Trust, and Duke Foundation.
The primary goal is to write these grants is to obtain funds for CCHIT certification. The fee for certification is $35,000, with a total average cost of approximately $200,000. This reflects approximately 1,650 man-hours of expert developer time to write the modules necessary to achieve certification. This will require connectivity necessary to do SureScripts for electronic prescribing. Jude Pierre, MD at Phyaura.com has been working on this module and intends to donate this to the EMR project. He needs testing to make sure it works. It will be necessary to link to Jude Pierre's system to be able to do e-prescribing.
Dr. Bowen: “Can we use mirth to do interoperability for HL7 messaging between open EMR , other facilities, hospitals, and laboratories. “
Rod Roark responded “I don't know.”
Andres Paglayan discussed that he had recently attended a web conference about Mirth Need to define two things 1. Input from OEMR 2. Mirth 3. output from Mirth to OEMR.
Andres stated “You need to at least once manually map to a vendor”. “need either an HL7 stream or XML or SQL”. “Mirth is more work than it is worth”. CCHIT needs to export data. This is the same amount of work either way”. Dr. Bowen stated: “company executives have been contacting me by email about whether or not OEMR can be used as 'software as a service (SAAS)'.” HHS “we spoke with David Hughes by telephone Jan 19th from 11-12. It was very clear from talking to Dr Hughes that they were going to require CCHIT certification. We need to estimate the cost of achieving CCHIT certification.
Mark Leads “are there free resources about how to get CCHIT certified.”
Andre Paglayan: “ Mirth is written in Java.”
Bowen. “can this be incorporated within IOEMR”
Andre “it needs more investigation”.
Bowen “one of the things that we need to do is incorporate donations via PayPal on our webpage.” “we can do a prepackaged software that would sell online for about $120 per package”. I have been talking to Joel Holtzer from Liverpool, NY about creating a Windows package that Windows users can install and operate. There are a very large number of untapped Windows users due to the difficulty of installation.” Mark Leeds; “We can use Xampp as a way of helping improve Windows installation. I wonder about who can support that type of installation.” Rod Roark: I have been workig on a Debian package and software repository for aptget. This sould work for both Debian and Ubuntu.” Bowen: we need to notify the Debian and Ubunto projects when ready.”
- Taxes - Form pf990 has bee completed.
- Finances - I have been upgrading the software on oemr.org to allow for the inclusion of a PayPal module to allow us to start accepting on-line donations. I was planning on using my PayPal account and connecting this to the OSMS checking account at BofA.
- sale of pre-packaged software - so far we don't have any pre-packeged software to sell. ? openemr.deb?
- Grants - I am setting up a meeting with Barbara Pullen-Smith at the office of NC Office of Minority Health Care. Forrest Toms has recommended that w use Barbara Pullen-Smiths contact to go to BCBSNC Foundation, Kate B. Reynolds, and the NC Department of Rural Mark Leeds, DO
Michiel Bosman, MD
Samuel T. Bowen, MD
Health Care.
- Financial Statement - Checking account balance is $3,067.15.
- Organizational status - There is a Tina Johnson in Devine ,Tx. who has been pushing OpenEMR as a Software as a Service and who has permission from CMS to work as a electronic prescribing clearing house. Tina has been in contact with the Department of Health and Human services. We had a telephone conference. The HHS is unwilling to help us at all unless we can achieve CCHIT certification.
5. Marketing - What are we doing to actively promote OpenEMR
IPPF press release 1.0 in March. They have set up 3 successful pilot projects in Barbados, Indonesia, and Nepal. Dr. Bowen: “I would like if lpossible to get a press release from IPPF to be able to distribute for marketing purposes.”
6. Software Development
- Installation needs to be easier - packages (Debian, Ubuntu, RPM.) I am working on a package with Joe Holzer of Liverpool, New York to try to get a working openemr.exe using the xampp installer.
- Security - consistent checking of user input.
Jason Morrill had a lot of trouble with the filtreatment(). One version was specifically for PHP4 and the other version was specifically for PHP5. Cristian Navilici kept substituting the PHP5 version which broke OEMR for Jason and a number of users. Bowen: “PHP 6 is on the horizon how long are we going to suport PHP 4? Is it possible to use the ADODB autoexecute() function to do the security for user input?” Rod Roark: “I would prefer to use the internal modules for PHP to make these connections.” Rod Continues: “The system is not (currently) very object-oriented” Rod Roark: “A number of developers have been sloppy about putting code into the database without ensuring whether or not it worked first... which crashed the systems.”
Rod Roark: “Developers should really use the built-in PHP functions including mysqli”. Rod Roark: “If you use the usual PHP functions help protect against SQL injection attacks.” Rod : This code should be centrally secured. SQL queries should go through a wrapper function. This is currently called sql.inc module. It is the wrapper function that contains the SQL statement checking. Rod Roark “We might consider using ACL to hide the link needed to connect to the database. This would help prevent professional attacks. I use SSL certificates to authenticate the browser to the server. I issue a certificate to each of my users.” Mark Leeds: “I get nervous relying only on SSL certification. On my system you have to use a password to connect to a directory then you are allowed to connect to the real oemr webpage.”
Internationalization
Michiel Bosman: Discussed adding translations including getting native speakers to translate into Spanish, French, Russian, and German.”
- Integration of Billing inside of OpenEMR - done per Rod Roark
Practice Management module that is an integral part of OpenEMR. - This has been accomplished per Rod Roark. The integrated AR management makes it much smoother and much easier to install. Dr. Bowen proposed that the next OEMR release would be titled 3.0.0.
Rod Roark: “ SQL ledger is now optional.”
7.Comments period
Michiel Bosman: “ we noticed that when using OEMR that the patients got mixed up if we used more than one screen at a time.” Rod Roark: “This has already been fixed in version 2.8.2. What you have to do is select concurrent layout = true.”
8. Adjourn
