A knowledgeable security model for distributed health information systems

Computers and Security

Volumn 29, Issue 3, 2010, Pages 331-349

  Xiao, Liang ^a   Hu, Bo ^a   Croitoru, Madalina ^a   Lewis, Paul ^a   Dasmahapatra, Srinandan ^a  

^a UNIVERSITY OF SOUTHAMPTON   (United Kingdom)

Author keywords

Decision support system (DSS); Distributed clinical information system; Interaction model; Lightweight Coordination Calculus (LCC); Multi agent system (MAS); Security model

Indexed keywords

CLINICAL INFORMATION SYSTEM; COORDINATION CALCULUS; DISTRIBUTED SERVICE; DOMAIN ONTOLOGIES; FLEXIBLE INTEGRATION; HEALTH INFORMATION SYSTEMS; HEALTHCARE DOMAINS; HETEROGENEOUS SOURCES; HUMAN BRAIN; MULTI-AGENT SYSTEM (MAS); PATIENT MANAGEMENT; PERVASIVE HEALTHCARE; PROCESS CALCULI; PROTOTYPE SYSTEM; SECURITY CHALLENGES; SECURITY MODEL; SUBDOMAIN; SYSTEM SECURITY;

CALCULATIONS; DATA TRANSFER; DECISION SUPPORT SYSTEMS; DECISION THEORY; HEALTH CARE; INFORMATION SYSTEMS; MULTI AGENT SYSTEMS; ONTOLOGY;

DECISION MAKING;

EID: 77949570640     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2009.08.002     Document Type: Article

References (40)

1. Aamodt A. Knowledge-intensive case-based reasoning in creek. Advances in case-based reasoning, 7th European conference, ECCBR 2004, proceedings, volume 3155 of lecture notes in artificial intelligence (2004), Springer 1-15
2. Anderson R. Undermining data privacy in health information. British Medical Journal 322 (2001) 442-443
3. Anderson R.J. Security in clinical information systems. British Medical Journal (1996)
4. Anderson RJ. Patient confidentiality - at risk from NHS wide networking. In: Proceedings of healthcare 96; 1996b.
5. Blobel B. Authorisation and access control for electronic health record systems. International Journal of Medical Informatics 73 3 (2004) 251-257
6. BMA - British Medical Association. http://www.bma.org.uk
7. Brown N., and Reynolds M. Strategy for production and maintenance of standards for interoperability within and between service departments and other healthcare domains. Technical report, CEN/TC 251 (2000), Health Informatics, Brussels, Belgium
8. Calam D. Information governance - security, confidentiality and patient identifiable information. http//etdevents.connectingforhealth.nhs.uk/eventmanager/uploads/ig.ppt
9. Chandramouli R. Business process driven framework for defining an access control service based on roles and rules. In: 23rd National information systems security conference; 2000.
10. Clunie D. DICOM structured reporting (2000), PixelMed
11. Croitoru M., Compatangelo E. A tree decomposition algorithm for conceptual graph projection. In: 10th International conference on principles of knowledge representation and reasoning; 2006a. pp. 271-76.
12. Croitoru M., and Compatangelo E. Conceptual graph projection: a tree decomposition-based approach. In: Doherty P., Mylopuolos, and Welty C. (Eds). Proc. of the 10th Int'l Conf. on the principles of knowledge representation and reasoning (KR'2006) (2006), AAAI 271-276
13. Crook R., Ince D., Nuseibeh B. Towards an analytical role modelling framework for security requirements. In: 8th International workshop on requirements engineering: foundation for software quality; 2002.
14. Davis R., Shrobe H., and Szolovits P. What is a knowledge representation?. AI Magazine 14 1 (1993) 17-33
15. Denley I., and Smith S.W. Privacy in clinical information systems in secondary care. British Medical Journal 318 (1999) 1328-1331
16. Hawker A. Confidentiality of personal information: a patient survey. Journal of Informatics in Primary Care (1995) 16-19
17. HealthAgents. http//www.healthagents.net
18. http//www.hl7.org Health level 7
19. Hu J., Weaver AC. Dynamic, context-aware access control for distributed healthcare applications. In: 1st Workshop on pervasive security, privacy and trust; 2004.
20. http//www.openehr.org Openehr
21. Iakovidis I. Towards personal health record: current situation, obstacles and trends in implementation of electronic healthcare records in Europe. International Journal of Medical Informatics 52 128 (1998) 105-117
22. Joint Computer Group of the GMSC and RCGP, GMSC and RCGP guidelines for the extraction and use of data from general practitioner computer systems by organisations external to the practice. Appenaix III. In: Committee on standards of data extraction from general Practice Guidelines; 1988.
23. M-Tech Information Technology, Inc. Beyond roles: a practical approach to enterprise user provisioning (2006)
24. Milner R. A calculus of communicating systems (1980), Springer Verlag
25. Milner R., Parrow J., and Walker D. A calculus of mobile processes, i. Information and Computation 100 1 (1992) 1-40
26. Mugnier ML. Knowledge representation and reasonings based on graph homomorphism. In: Proc. of the 8th int'l conf. on conceptual structures (ICCS'2000); 2000. pp. 172-92.
27. Omicini A., Ricci A., and Viroli M. RBAC for organisation and security in an agent coordination infrastructure. Electronic Notes in Theoretical Computer Science 128 5 (2005) 65-85
28. Pereira A.L., Muppavarapu V., and Chung S.M. Role-based access control for grid database services using the community authorization service. Transactions on Dependable and Secure Computing 3 2 (2006) 156-166
29. Pitchford R.A., and Kay S. GP practice computer security survey. Journal of Informatics in Primary Care (1995) 6-12
30. Robertson D. Multi-agent coordination as distributed logic programming. In: Proceedings of the 20th international conference logic programming (ICLP); 2004. pp. 416-30.
31. Robertson D. A lightweight coordination calculus for agent systems. LNCS vol. 3476 (2005), Springer pp. 183-197
32. Robertson D., Giunchiglia F., Harmelen F., Marchese M., Sabou M., Schorlemmer M., et al. Open knowledge: semantic webs through peer-to-peer interaction (2006), OpenKnowledge Manifesto. http//www.openk.org
33. Sandhu R.S., Coyne E.J., Feinstein H.L., and Youman C.E. Role-based access control models. Computer 29 2 (1996) 38-47
34. Sowa J. Knowledge representation: logical, philosophical, and computational foundations (2000), Brooks Cole Publishing Co.
35. Wooldridge M., Jennings N.R., and Kinny D. The gaia methodology for agent-oriented analysis and design. Journal of Autonomous Agents and Multi-Agent Systems 3 3 (2000) 285-312
36. Weiser M. The computer of the 21st century. Scientific American 265 3 (2001) 66-75
37. Xiao L., and Greer D. Adaptive agent model: software adaptivity using an agent-oriented model driven architecture. Information and Software Technology 51 1 (2009) 109-137 Elsevier
38. Xiao L., Lewis P., and Gibb A. Developing a security protocol for a distributed decision support system in a healthcare environment. 30th international conference on software engineering (2008), ACM 673-682
39. Xiao L., Peet A., Lewis P., Dashmapatra S., Sáez C., Croitoru M., et al. An adaptive security model for multi-agent systems and application to a clinical trials environment. 31st IEEE annual international computer software and applications conference (2007), IEEE Press 261-266
40. Zhang L., Ahn G., and Chu B. A role-based delegation framework for healthcare information systems. 7th ACM symposium on access control models and technologies (2002), ACM, New York 125-134