Multi-domain and privacy-aware role based access control in eHealth

Proceedings of the 2nd International Conference on Pervasive Computing Technologies for Healthcare 2008, PervasiveHealth

Volumn , Issue , 2008, Pages 131-134

  Martino, Lorenzo D ^a   Ni, Qun ^a   Lin, Dan ^a   Bertino, Elisa ^a  

^a PURDUE UNIVERSITY   (United States)

Author keywords

Data profile; Multi domain; P RBAC; Privacy

Indexed keywords

ACCESS CONTROL; CANNING; CONTROL SYSTEMS; HEALTH; HOSPITAL DATA PROCESSING; SECURITY SYSTEMS;

DATA PROFILE; E-HEALTH; HEALTH CARE COSTS; HEALTH CARE PROFESSIONALS; HEATHCARE; INTERNATIONAL CONFERENCES; META-INFORMATION; MULTI DOMAINS; MULTI-DOMAIN; P-RBAC; PATIENT DATA; PATIENT SAFETY; PERVASIVE COMPUTING; PRIVACY; PRIVACY PRESERVING; QUALITY OF CARE; ROLE-BASED ACCESS CONTROL;

TECHNOLOGY;

EID: 52149091653     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PCTHEALTH.2008.4571050     Document Type: Conference Paper

References (14)

1. United State Department of Health, "Health insurance portability and accountability act of 1996," available at http://www.hhs.gov/ocr/hipaa/.
2. O. R. Heathcare, "Orlando regional heathcare privacy practices," available at http://www.orlandoregional.org/OrlandoRegional/ AboutUs/PrivacyPractices.
3. TRUSTe.org, "An independent, nonprofit enabling trust based on privacy for personal information on the internet," available at http://www.truste.org/.
4. S. Fischer-Hubner, IT-security and privacy: design and use of privacy-enhancing security mechanisms. Springer-Verlag New York, Inc., 2001.
5. Q. Ni, A. Trombetta, E. Bertino, and J. Lobo, "Privcy aware role based access control," in SACMAT '07: Proceedings of the 12th ACM symposium on Access control models and technologies. New York, NY, USA: ACM Press, 2007.
6. D. F. Ferraiolo, R. Sandhu, S. Gavrila, D. R. Kuhn, and R. Chandramouli, "Proposed nist standard for role-based access control," ACM Trans. Inf. Syst. Secur., vol. 4, no. 3, pp. 224-274, 2001.
7. W3C, "Platform for privacy preferences (p3p) project," available at http://www.w3.org/P3P.
8. IBM Zurich Research Laboratory, Switzerland, "The enterprise privacy authorization language(epal 1.1)," available at http://www.zurich.ibm.com/ security/enterprise-privacy/epal/.
9. OASIS, fiextensible access control markup language (xacml) 2.0," available at http://www.oasis-open.org/.
10. A. H. Anderson, "A comparison of two privacy policy languages: Epal and xacml," in SWS '06: Proceedings of the 3rd ACM workshop on Secure web services. ACM Press, 2006.
11. Organisation for Economic Co-operation and Development, "Oecd guidelines on the protection of privacy and transborder flows of personal data of 1980," available at http://www.oecd.org/.
12. T. Scavo and S. Cantor, "Shibboleth architecture - technical overview, 8-june-2005," avaliable at http://shibboleth.internet2.edu/docs/ draft-mace-shibboleth-tech-overview-latest.pdf.
13. ASTM International, "Astm international," available at http://www.astm.org.
14. Q. Ni, "P-RBAC," http://www.cs.purdue.edu/homes/ni/prbac.html.