Web-based secure access from multiple patient repositories

International Journal of Medical Informatics

Volumn 77, Issue 4, 2008, Pages 242-248

  Choe, Jun ^a   Yoo, Sun K ^b,c  

^a Yonsei University   (South Korea)

^b Yonsei University College of Medicine   (South Korea)

^c Human Identification Research Center   (South Korea)

Author keywords

Heterogeneous repositories; Multi agents; RBAC; Secure access; Web; XML Security

Indexed keywords

CRYPTOGRAPHY; DATA RECORDING; INFORMATION MANAGEMENT; INFORMATION SYSTEMS; INTERNET; XML;

DATA INTEGRITY; PATIENT REPOSITORIES; USER AUTHENTICATION; WEB-BASED SECURE ACCESS;

ACCESS CONTROL;

ARTICLE; CONFIDENTIALITY; HEALTH CARE; HOSPITAL INFORMATION SYSTEM; HOSPITAL POLICY; INFORMATION PROCESSING; INTERNET; MEDICAL RECORD; PATIENT INFORMATION; PRIORITY JOURNAL;

COMPUTER SECURITY; HUMANS; INTERNET; MEDICAL RECORDS SYSTEMS, COMPUTERIZED; SOFTWARE;

EID: 39749152423     PISSN: 13865056     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ijmedinf.2007.06.001     Document Type: Article

References (14)

1. Gritzalis D., and Lambrinoudakis C. A security architecture for interconnecting health information systems. Int. J. Med. Inform. 73 3 (2004) 305-309
2. Kallepalli V.N., Ehikioya S.A., Camorlinga S., and Rueda J.A. Security middleware infrastructure for DICOM images in health information systems. J. Digit. Imaging 16 4 (2003) 356-364
3. Scott R.E., Jennett P., and Yeo M. Access and authorisation in a Glocal e-Health Policy context. Int. J. Med. Inform. 73 3 (2004) 259-266
4. Blobel B. Authorisation and access control for electronic health record systems. Int. J. Med. Inform. 73 3 (2004) 251-257
5. Tzelepi S., Pangalos G., and Nikolacopoulou G. Security of medical multimedia. Med. Inform. Internet Med. 27 3 (2002) 169-184
6. Georgiadis C.K., Mavridis I.K., Nikolakopoulou G., and Pangalos G.I. Implementing context and team based access control in healthcare intranets. Med. Inform. Internet Med. 27 3 (2002) 185-201
7. Ferraiolo D.F., Kuhn D.R., and Chandramouli R. Role-Based Access Control (2003), Artech House
8. Gritzalis S., Gritzalis D., Moulinos C., and Iliadis J. An integrated architecture for deploying a virtual private medical network over the Web. Med. Inform. Internet Med. 26 1 (2001) 49-72
9. Dournaee B. XML Security (2002), McGraw-Hill pp. 107-278
10. D. Eastlake, J. Reagle, XML Encryption Syntax and Processing, W3C Recommendation, 10 December 2002, http://www.w3.org/TR/2002/REC-xmlenc-core-20021210, accessed 10 July 2004.
11. D. Eastlake, J. Reagle, D. Solo, XML-Signature Syntax and Processing, W3C Recommendation, 12 February 2002, http://www.w3.org/TR/2002/REC-xmldsig-core-20020212, accessed 10 July 2004.
12. R. Housley, W. Polk, W. Ford, D. Solo, IETF, RFC 3280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile, April 2002, http://www.ietf.org/rfc/rfc3280.txt, accessed 10 July 2004.
13. HL7 Standard, Clinical Document Architecture (CDA), http://www.hl7.org/, accessed 10 July 2004.
14. R. Cover, Extensible Access-control Markup Language (XACML), http://xml.coverpages.org/xacml.html, June 2005.