Information governance in NHS's NPfIT: A case for policy specification

International Journal of Medical Informatics

Volumn 76, Issue 5-6, 2007, Pages 432-437

  Becker, Moritz Y ^a  

^a MICROSOFT RESEARCH   (United Kingdom)

Author keywords

Access control; Authorisation policy; Electronic health record; Patient confidentiality; Trust management

Indexed keywords

ACCESS CONTROL; HEALTH CARE; INFORMATION SERVICES; LAWS AND LEGISLATION; NATURAL LANGUAGE PROCESSING SYSTEMS;

AUTHORISATION POLICY; ELECTRONIC HEALTH RECORDS (EHR); HEALTH RECORD SERVICES; SECURITY POLICIES; TRUST MANAGEMENT;

INFORMATION MANAGEMENT;

ACCESS TO INFORMATION; ARTICLE; COMPUTER SECURITY; CONFIDENTIALITY; ELECTRONIC MEDICAL RECORD; ETHICS; HEALTH CARE POLICY; NATIONAL HEALTH SERVICE; PRIORITY JOURNAL; UNITED KINGDOM;

ACCESS TO INFORMATION; COMPUTER SECURITY; CONFIDENTIALITY; HUMANS; MEDICAL RECORDS SYSTEMS, COMPUTERIZED; SECURITY MEASURES;

EID: 33947705701     PISSN: 13865056     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ijmedinf.2006.09.008     Document Type: Article

References (25)

1. Brennan S. The NHS IT Project: The Biggest Computer Programme in the World ... Ever! (2005), Radcliffe Publishing
2. Anderson R. Patient confidentiality-at risk from NHS-wide networking. In: Richards B., and de Glanville H. (Eds). Current Perspectives in Healthcare Computing (1996), BJHC Books, Weybridge 687-692
3. Anderson R. Information technology in medical practice: safety and privacy lessons from the United Kingdom. Med. J. Aust. 170 (1999) 181-185
4. Browne A. Lives ruined as NHS leaks patients' notes (25/06/00). Observer (2000)
5. National Health Service, UK, Integrated care records service: output based specification version 2, 2003.
6. Oswald M. Information governance in the NCRS - material for NHS presentations - DRAFT v.05. Natl. Programme Inf. Technol. (2005)
7. Blaze M., Feigenbaum J., and Lacy J. Decentralized trust management. IEEE Symposium on Security and Privacy (1996) 164-173
8. Blaze M., Feigenbaum J., and Keromytis A.D. The role of trust management in distributed systems security. Secure Internet Programming (1999) pp. 185-210
9. M. Blaze, J. Feigenbaum, Angelos D. Keromytis, The KeyNote trust management system, RFC 2704.
10. Carl M. Ellison, SPKI requirements, RFC 2692.
11. Damianou N., Dulay N., Lupu E., and Sloman M. The Ponder policy specification language. Policy Workshop (2001)
12. Halpern J.Y., and Weissman V. Using first-order logic to reason about policies. CSFW (2003) pp. 187-201
13. Gunter C., and Jim T. Policy-directed certificate retrieval. Software-Pract. Experience 30 15 (2000) 1609-1640
14. Jim T. SD3: a trust management system with certified evaluation. Proceedings of the 2001 IEEE Symposium on Security and Privacy (2001) 106-115
15. DeTreville J. Binder, a logic-based security language. IEEE Symposium on Security and Privacy (2002) 105-113
16. Li N., Mitchell J.C., and Winsborough W.H. Design of a role-based trust management framework. Proceedings of the 2002 IEEE Symposium on Security and Privacy (2002) 114-130
17. Bacon J., Moody K., and Yao W. A model of OASIS role-based access control and its support for active security. ACM Trans. Inf. Syst. Secur. 5 4 (2002) 492-540
18. Becker M.Y., and Sewell P. Cassandra: distributed access control policies with tunable expressiveness. IEEE 5th International Workshop on Policies for Distributed Systems and Networks (2004) 159-168
19. Becker M.Y., and Sewell P. Cassandra: flexible trust management, applied to electronic health records. IEEE Computer Security Foundations Workshop (2004) 139-154
20. Winsborough W.H., Seamons K.E., and Jones V.E. Automated trust negotiation. DARPA Information Survivability Conference and Exposition, vol. 1 (2000) 88-102
21. Winsborough W.H., and Li N. Towards practical automated trust negotiation. Proceedings of the 3rd International Workshop on Policies for Distributed Systems and Networks (2002) 92-103
22. Sandhu Ravi. Rationale for the RBAC96 family of access control models. Proceedings of the 1st ACM Workshop on Role-Based Access Control (1997)
23. Moritz Y. Becker, Cassandra: flexible trust management and its application to electronic health records, Technical Report UCAM-CL-TR-648, University of Cambridge, Computer Laboratory, 2005.
24. Moritz Y. Becker, A formal security policy for an NHS electronic health record service, Technical Report UCAM-CL-TR-628, University of Cambridge, Computer Laboratory, April 2005.
25. Nick Gaunt, Confidentiality and consent: use cases applicable to shared electronic health record, S&W Devon ERDIP Project, 2003.