Access and privacy rights using web security standards to increase patient empowerment

Studies in Health Technology and Informatics

Volumn 137, Issue , 2008, Pages 275-285

  Falcão Reis, Filipa ^a   Costa Pereira, Altamiro ^b,c   Correia, Manuel E ^a  

^a UNIVERSITY OF PORTO   (Portugal)

^b CINTESIS Center for Research in Health Information Systems and Technologies

^c University of Porto   (Portugal)

Author keywords

Access control; Audit; Electronic health records; Patient empowerment; Privacy; Web services

Indexed keywords

ACCESS CONTROL; BIOASSAY; DATA PRIVACY; INFORMATION SYSTEMS; INFORMATION USE; MEDICAL COMPUTING; RECORDS MANAGEMENT; WEB SERVICES;

ACCESS CONTROL SCHEMES; AUDIT; ELECTRONIC HEALTH RECORD; ELECTRONIC HEALTH RECORD SYSTEMS; HEALTH INFORMATION SYSTEMS; MEDICAL PROFESSIONALS; PATIENT EMPOWERMENTS; PROTECTION OF PRIVACY;

ELECTRONIC DOCUMENT EXCHANGE;

ARTICLE; COMPUTER SECURITY; CONFIDENTIALITY; EUROPEAN UNION; HUMAN; INTERNET; MANAGEMENT; MEDICAL RECORD; METHODOLOGY; PATIENT RIGHT; STANDARD;

COMPUTER SECURITY; CONFIDENTIALITY; EUROPEAN UNION; HUMANS; INTERNET; MANAGEMENT AUDIT; MEDICAL RECORDS SYSTEMS, COMPUTERIZED; PATIENT ACCESS TO RECORDS; PATIENT RIGHTS;

EID: 52649105433     PISSN: 09269630     EISSN: 18798365     Source Type: Book Series    
DOI: None     Document Type: Conference Paper

References (24)

1. Diffie W., Hellman M.E. - Privacy and authentication: An introduction to cryptography. IEEE. 1979 March; 67(3):397-427.
2. OECD - Organization for Economic Co-operation and Development. OECD Guidelines on the Protection of Privacy and Trans-border Flows of Personal.
3. Feldman D., Novack D., Gracely E. - Effects of Managed Care on Physician-Patient Relationships, Quality of Care, and the Ethical Practice of Medicine. Archives of Internal Medicine. 1998;158:1626-1632.
4. European Commission - Data Protection: Directive 95/46/EC on the protection of personal data.
5. European Commission - Justice and Home Affairs: Data Protection.
6. Wolley S. - Data Security and Privacy Audits adding value to the organization.
7. Windley P, Digital Identity. O'Reilly. 2005.
8. EuroSOCAP - European Standards on Confidentiality and Privacy in Healthcare.
9. The Open Group. Distributed Audit Service (XDAS) Base. 1997. Accessed in February 2008.
10. Segal L, The importance of patient empowerment in health system reform. Health Policy, Volume 44, Issue 1, Pages 31-44.
11. Ceremi E, Web Services Essentials. O'Reilly. 2002.
12. Chappel D, Jewell T, Java Web Services. O'Reilly. 2002.
13. OASIS - Organization for the Advancement of Structured Information Standards.
14. Nielsen J, How to conduct a Heuristic Evaluation. 1994.
15. OASIS - eXtensible Access Control Markup Language (XACML).
16. OASIS - Core and hierarchical role based access control (RBAC) profile of XACML v2.0.
17. Crampton J, DIMACS Workshop on Secure Web Services and e-Commerce - XACML and Role-Based Access Control.
18. OASIS - Privacy Policy Profile of XACML 2.0.
19. Sun's XACML implementation. Available at: http://sunxacml.sourceforge. net/. Accessed in February 2008.
20. OASIS - XML Digital Signature profile of XACML v2.0.
21. Steel C, Nagappan R, Lai R, Core Security Patterns: Best Practices and Strategies for J2EE™, Web Services, and Identity Management. Prentice Hall PTR / Sun Micros. 2005.
22. ComputerWeekly.com - Sir Bobby Robson's EHRs viewed illicitly by NHS staff. Available at: http://www.computerweekly.com/blogs/tony-collins/2007/09/ bobby-robsons-medical-records-1.html. Accessed in February 2008.
23. ComputerWeekly.com - NpfIT security warning after NHS staff view celebrity record. Available at: http://www.computerweekly.com/blogs/tony- collins/2007/09/npfit-security-warning-after-n.html. Access in February 2008.
24. st century. O'Reilly. 2000.