An initial model and a discussion of access control in patient controlled health records

ARES 2008 - 3rd International Conference on Availability, Security, and Reliability, Proceedings

Volumn , Issue , 2008, Pages 935-942

  Røstad, Lillian ^a  

^a NORWEGIAN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Norway)

Author keywords

[No Author keywords available]

Indexed keywords

SECURITY SYSTEMS;

ACCESS CONTROL MODELS; HEALTH INFORMATIONS; HEALTH RECORDS; IN-CONTROL; INTERNATIONAL CONFERENCES; USAGE SCENARIOS;

ACCESS CONTROL;

EID: 49049099663     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2008.185     Document Type: Conference Paper

References (16)

1. R. Hillestad, J. Bigelow, A. Bower, F. Girosi, R. Meili, R. Scoville, and R. Taylor. Can electronic medical record systems transform health care? potential health benefits, savings, and costs. Health Affairs, 24(5):1103-1117, 2005.
2. W. R. Hersh. Medical informatics: Improving health care through information. The Journal of the American Medical Association (JAMA), 288(16):1955-1958, 2002.
3. Connecting for health: The personal health working group final report. Technical report, Markle Foundation, July 1 2003.
4. P. C. Tang, J. S. Ash, D.W. Bates, J. M. Overhage, and D. Z. Sands. Personal health records: Definition, benefits, and strategies for overcoming barriers to adoption. Journal of the Ammerican Medical Informatics Association, 2005.
5. M. I. Kim and K. B. Johnson. Personal health records: Evaluation of functionality and utility. J Am Med Inform Assoc, 9(2):171-180, 2002.
6. K. D. Mandl, P. Szolovits, and I. S. Kohane. Public standards and patients' control: how to keep electronic medical records accessible but private commentary: Open approaches to electronic patient records commentary: A patient's viewpoint. BMJ, 322(7281):283-287, 2001.
7. D. F. Ferraiolo, D. R. Kuhn, and R. Chandramouli. Role-Based Access Control. Computer Security Series. Artech House Publishers, Boston, 1 edition, 2003.
8. B. Blobel. Authorisation and access control for electronic health record systems. International Journal of Medical Informatics, 73(3):251-257, 2004.
9. L. Zhang, G.-J. Ahn, and B.-T. Chu. A role-based delegation framework for healthcare information systems. Proceedings of the seventh ACM symposium on Access control models and technologies. ACM Press, Monterey, California, USA, 2002. 507731.
10. K. Beznosov. Requirements for access control: US Healthcare domain. Proceedings of the third ACM workshop on Role-based access control. ACM Press, Fairfax, Virginia, United States, 1998.
11. M. Evered and S. Bgeholz. A case study in access control requirements for a Health Information System. Proceedings of the second workshop on Australasian information security, Data Mining and Web Intelligence, and Software Internationalisation - Volume 32. Australian Computer Society, Inc., Dunedin, New Zealand, 2004.
12. A. N. S. Institute. American national standard for information technology: Role based access control. Technical Report ANSI INCITS 359-2004, 2004.
13. W. W. Simons, K. D. Mandl, and I. S. Kohane. The ping personally controlled electronic medical record system: Technical architecture. J Am Med Inform Assoc, 12(1):47-54, 2004.
14. I. S. Kohane, K. D. Mandl, P. L. Taylor, I. A. Holm, D. J. Nigrin, and L. M. Kunkel. Medicine: Reestablishing the researcher-patient compact. Science, 316(5826):836-837, 2007.
15. S. Na and S. Cheon. Role delegation in role-based access control. Proceedings of the fifth ACM workshop on Role-based access control. ACM Press, Berlin, Germany, 2000. 344300.
16. L. Røstad and O. Edsberg. A study of access control requirements for healthcare systems based on audit trails from access logs. In 22nd Annual Computer Security Applications Conference (ACSAC'06), pages 175-186, Miami, Florida, 2006. IEEE.