How to break access control in a controlled manner

Proceedings - IEEE Symposium on Computer-Based Medical Systems

Volumn 2006, Issue , 2006, Pages 847-851

  Ferreira, A ^a   Cruz Correia, R ^a,b   Antunes, L ^c   Farinha, P ^b   Oliveira Palhares, E ^b   Chadwick, D W ^d   Costa Pereira, A ^a,b  

^a University of Porto   (Portugal)

^b Faculty of Medicine   (SCG)

^c UNIVERSITY OF PORTO   (Portugal)

^d UNIVERSITY OF KENT   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL; CLINICAL REPORTS; ELECTRONIC MEDICAL RECORD (EMR);

DATA PRIVACY; HEALTH CARE; INFORMATION ANALYSIS; SECURITY OF DATA;

MEDICAL COMPUTING;

EID: 33845638417     PISSN: 10637125     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CBMS.2006.95     Document Type: Conference Paper

References (11)

1. Waegemann P. EHR vs. CPR vs. EMR. Healthcare Informatics Online. 2003. Available at: http://www.healthcare-informatics.com/issues/2003/05_03/cover_ehr. htm.
2. Bakker Ab. Access to EHR and access control at a moment in the past: a discussion of the need and an exploration of the consequences. International Journal of Medical Informatics. 2004; 73:267-270.
3. Anderson R. Security Engineering: A guide to build dependable distributed systems. Wiley 2001.
4. Blobel B. Authorisation and access control for electronic health record systems. International Journal of Medical Informatics. 2004; 73: 251-257.
5. Cruz-Correia R, Vieira-Marques P, Costa P, Ferreira A, Oliveira-Palhares E, Araújo F, Costa-Pereira A. Integration of Hospital data using Agent Technologies - a case study. AlCommunications special issue of ECAI. 2005; 18(3): 191-200.
6. th International Symposium for Health Information Management Research. 2005.
7. Rissanen E, Firozabadi S, Sergot M. Towards a Mechanism for Discretionary Overriding of Access Control. Proceedings of the 12th International Workshop on Security Protocols, Cambridge. 2004.
8. Povey D. Optimistic security: a new access control paradigm," in Proceedings of the 1999 workshop on New security paradigms. ACM Press, 2000; 40-45.
9. Break-Glass - An Approach to granting access to Healthcare Systems. Joint security and privacy committee NEMA/COCIR/JIRA, International Medical Informatics. 2004. Available at:http://www.nema.org/prod/med/security/upload/ Break-Class_-_Energency_Access_to_Healthcare_Systems.pdf. Accessed on: 14th March 2006.
10. Ferraiolo D, Sandhu R, Gavrila S, Kuhn R, Chandramouli R. Proposed NIST Standard for Role-based Access Control. ACM Transactions on Information and systems security. 2001; 4(3):224-274.
11. A guide to Understanding Discretionary Access Control in Trusted Systems. National Computer Security Center, Maryland. NCSC-TG-003, Version 1. 1987.