Implementing security in a distributed web-based EHCR

International Journal of Medical Informatics

Volumn 76, Issue 5-6, 2007, Pages 491-496

  Sucurovic, Snezana ^a  

^a MIHAJLO PUPIN INSTITUTE   (Serbia)

Author keywords

Computer security; Integrated advanced information management systems

Indexed keywords

AUTHENTICATION; HEALTH CARE; PATIENT TREATMENT; SERVERS; STANDARDS; WEB SERVICES;

COMPUTERISATION; HEALTHCARE SERVICES; INTEGRATED ADVANCED INFORMATION MANAGEMENT SYSTEMS;

SECURITY OF DATA;

ACCESS TO INFORMATION; ARTICLE; COMPUTER SECURITY; ELECTRONIC MEDICAL RECORD; INFORMATION RETRIEVAL; INFORMATION STORAGE; INTERNET; MEDICAL INFORMATION SYSTEM; PRIORITY JOURNAL;

COMPUTER SECURITY; COMPUTER SYSTEMS; DATABASE MANAGEMENT SYSTEMS; HUMANS; MEDICAL RECORD LINKAGE; MEDICAL RECORDS SYSTEMS, COMPUTERIZED; REGISTRIES; TELEMEDICINE;

EID: 33947676926     PISSN: 13865056     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ijmedinf.2006.09.017     Document Type: Article

References (17)

1. CEN ENV 13606 Extended Architecture, http://www.centc251.org, accessed March 2002.
2. Sucurovic S., and Jovanovic Z. Java cryptography & X.509 authentication. Dr. Dobb's Journal (2005) 40-42
3. K. Beznosov, On the Benefits of Decomposing Policy Engines into Components, In Proceedings of 3rd Workshop on adaptive and Reflect Middleware, Toronto, 2004.
4. CEN ENV 13 729 Secure user identification, http://www.centc251.org, accessed March 2002.
5. S. Sucurovic, Z. Jovanovic, Java Cryptography & Attribute Certificate Management, Dr. Dobb's Journal (2006), www.ddj.com/dept/java/192600528, accessed October 2006.
6. Blobel B., Hoepner P., Joop R., Karnouskos S., Kleinhuis G., and Stassinopoulos G. Using a privilege management infrastructure for secure web-based e-health applications. Comput. Commun. (2003)
7. W. Zhou, C. Meinl, Implement role based access control with attribute certificates, In Proceedings of the ICACT 2004. Korea.
8. ITU-T Standard X.509, Information Technology - Open Systems Interconnection - The Directory: Public-key and Attribute Certificate Frameworks.
9. Blobel B. Authorisation and access control for electronic health record system. Intern. J. Med. Infor. 73 (2004) 251-257
10. D. Chadwick, A. Otenko, E. Ball, Role Based Access Control with X.509 Attribute Certificates, IEEE Internet Computing, March/April 2003, pp. 62-69.
11. J. Joshi, R. Bhatti, E. Bertino, A. Ghafoor, Access Control Language for Multidomain Environments, IEEE Internet Computing, November/December 2004, pp. 40-50.
12. MEDIS Technical Report, http://www.imp.bg.ac.yu/dokumenti/MEDISTechnicalReport.doc, accessed March 2006.
13. Security in Web Services World: A Proposed Architecture and Roadmap, http://www-128.ibm.com/developerworks/webservices/library/ws-secmap/, accessed March 2006.
14. http://www.w3.org/TR/xmlenc-core, XML Encryption Syntax and Processing W3C Recommendation, accessed March 2006.
15. http://www.w3.org/TR/2002/REC-xmldsig-core-20020212, XML Signature Syntax and Processing, accessed March 2006.
16. M. Drouineaud, A first step towards formal verification of security policy properties for RBAC, In Proceedings for International Conference on Quality Software, 2004.
17. E. Ivanova, WSDL Interface of Services for Distributed Search in Database, In Proceedings of CompSysTech 2004.