A context-aware approach to process-based PHR system security

Studies in Health Technology and Informatics

Volumn 156, Issue , 2010, Pages 201-213

  Mytilinaiou, Eleni ^a   Koufi, Vassiliki ^a   Malamateniou, Flora ^a   Vassilacopoulos, George ^a  

^a UNIVERSITY OF PIRAEUS   (Greece)

Author keywords

agent; context aware access control; least privilege principle; Personal Health Record; process; role based authorization

Indexed keywords

AGENTS; COORDINATION REACTIONS; HEALTH CARE; PROCESSING;

AUTHORIZATION AND ACCESS CONTROL; CONTEXT-AWARE ACCESS CONTROL; CONTEXT-AWARE APPROACHES; HEALTH CARE PROVIDERS; HEALTHCARE ORGANIZATIONS; LEAST PRIVILEGE; PERSONAL HEALTH RECORD; ROLE-BASED;

ACCESS CONTROL;

EID: 77954590045     PISSN: 09269630     EISSN: 18798365     Source Type: Conference Proceeding    
DOI: 10.3233/978-1-60750-565-5-201     Document Type: Conference Paper

References (29)

1. Koufi V, Vassilacopoulos G. HDGPortal: A Grid Portal Application for Pervasive Access to Process- Based Healthcare Systems. Proceedings of the 2nd International Conference in Pervasive Computing Technologies in Healthcare; 2008 Jan 31-Feb 2; Tampere, Finland.
2. Tang PC, Ash JS, Bates DW, Overhage JM, Sands DZ. Personal Health Records: Definitions, Benefits, and Strategies for Overcoming Barriers to Adoption. J Am Med Inform Assoc 2006:13(2):121-6.
3. Lauer G. Health Record Banks Gaining Traction in Regional Projects. 2009. [Online]. Available from: URL: http://www.ihealthbeat.org/features/2009/health- record-banks-gaining-traction-in-regionalprojects.aspx.
4. Alberta Health Services, Engaging the patient in healthcare: An overview of Personal Health Record Systems and Implications for Alberta. White Paper. 2009.
5. Wiljer D, Urowitz S, Apatu E, DeLenardo C, Eysenbach G, Harth T, Pai H, Leonard KJ. Patient accessible electronic health records: exploring recommendations for successful implementation strategies. J. Med. Internet Res 2008;10(4):e34.
6. Atluri V, Huang W. An Authorization Model for Workflows. Proceedings of the 4th European Symposium on Research in Computer Security. LNCS, 1146. 1996. p. 44-64.
7. Wu S, Sheth A, Miller J, Luo Z. Authorization and Access Control of Application Data in Workflow Systems. J Intell Inf Syst 2002;18(1):71-94.
8. National Institute of Standards and Technology (NIST), Role Based Access Control (RBAC) and Role Based Security. [Online]. Available from: URL: http://csrc.nist.gov/groups/SNS/rbac/.
9. Feinstein H, Sandhu R, Coyne E, Youman C. Role-based access control models. IEEE Computer 1996;29(2):38-47.
10. Zhang G, Parashar M. Context-Aware Dynamic Access Control for Pervasive Applications. Proceedings of the Communication Networks and Distributed Systems Modeling and Simulation Conference (CNDS 2004); 2004 Jan 18-21; San Diego (CA), USA.
11. Kapsalis V, Hadellis L, Karelis D, Koubias S. A dynamic context-aware access control architecture for e-services. J Comput Secur 2006;25:507-21.
12. Byun JW, Bertino E, Li N. Purpose Based Access Control of Complex Data for Privacy Protection. Proceedings of the 10th ACM Symposium on Access Control Models and Technologies (SACMAT'05); 2005 Jun 1-3; Stockholm, Sweden.
13. Hung PCK, New Brunswick, Canada, Proceedings.
14. Kulkarni D, Tripathi A. Context-Aware Role-based Access Control in Pervasive Computing Systems. Proceedings of the 13th ACM Symposium on Access Control Models and Technologies (SACMAT'08), 2008 Jun 11-13; Estes Park (CO), USA.
15. Lia Q, Zhangb X, Xua M, Wu J. Towards secure dynamic collaborations with group-based RBAC model. J Comput Secur 2009;28:260-75.
16. IBM Corporation. IBM Websphere Workflow - Getting Started with Buildtime V. 3.6, 2005.
17. ICW eHealth Framework. Lifesensor. [Online]. Available from: URL: http://idn.icwglobal. com/solutions/lifesensor/lifesensor.html.
18. Power K, Global Mobile Healthcare An Electronic Framework for Portability of Health Records. Medical Tourism Magazine 2009.
19. Kloppmann M, Koenig D, Leymann F, Pfau G, Rickayzen A, von Riegen C, et al. WS-BPEL Extension for People - BPEL4People, White Paper. 2005.
20. Emig C, Schandua H, Abeck S. SOA-aware authorization control. Proceedings of the International Conference on Software Engineering Advances; 2006 Oct 28-Nov 2; Papeete, Tahiti, French Polynesia.
21. Casati F, Castano S, Fugini M. Managing workflow authorization constraints through active database technology. Inform Syst Front 2001;3(3):319-38.
22. Liu DR, Shen M. Workflow modeling for virtual processes: An order-preserving process - view approach. Inform Syst 2003;28(6):505-32.
23. Marjanovic O. Towards IS supported coordination in emergent business processes. Bus Proc Manag J 2005;11(5):476-87.
24. Care2X Integrated Healthcare Environment. [Online]. Available from: ULR: http://www.care2x.org/
25. Bellifemine F, Caire G, Greenwood D. Developing Multi-Agent Systems with JADE. Wiley Series in Agent Technology; John Wiley & Sons; 2007.
26. JADE, Java Agent DEvelopment Framework. [Online].Available from: URL: http://jade.tilab.com.
27. The Foundation for Intelligent Physical Agents (FIPA). [Online]. Available from: URL: http://www.fipa.org/
28. The Foundation for Intelligent Physical Agents (FIPA), Agent Communication Language Specifications. [Online]. Available from: URL: http://www.fipa.org/repository/aclspecs.html
29. Juric MB, Mathew B, Sarang P. Business Process Execution Language for Web Services. Packt Publishing Ltd; 2006.