A comprehensive privacy-aware authorization framework founded on HIPAA privacy rules

IHI'10 - Proceedings of the 1st ACM International Health Informatics Symposium

Volumn , Issue , 2010, Pages 637-646

  Al Faresi, Ahmed ^a   Wijesekera, Duminda ^a   Moidu, Khaled ^b  

^a George Mason University   (United States)

^b GEORGE MASON UNIVERSITY   (United States)

Author keywords

access control; ehr; hipaa; itepp; phi; privacy policy

Indexed keywords

EHR; HIPAA; ITEPP; PHI; PRIVACY POLICIES;

ARCHITECTURE; DATA PRIVACY; HEALTH; HEALTH CARE; HEALTH INSURANCE; INFORMATION SCIENCE; LAWS AND LEGISLATION; SECURITY SYSTEMS;

ACCESS CONTROL;

EID: 78650925939     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1882992.1883093     Document Type: Conference Paper

References (18)

1. OASIS eXtensible access control markup language (XACML) TC. http://www.oasis-open.org/committees/tc home.php?wg abbrev=xacml.
2. The health information technology for economic and clinical health act (hitech). http://www.hipaasurvivalguide.com/hipaa-regulations/164-524.php, January 6, 2009.
3. R. Agrawal, J. Kiernan, R. Srikant, and Y. Xu. Hippocratic databases. In Proceedings of the 28th international conference on Very Large Data Bases, pages 143-154, Hong Kong, China, 2002. VLDB Endowment.
4. F. C. Bourgeois, P. L. Taylor, S. J. Emans, D. J. Nigrin, and K. D. Mandl. Whose personal control? creating private, personally controlled health records for pediatric and adolescent patients. Journal of the American Medical Informatics Association: JAMIA, 15(6):737-743, Dec. 2008. PMID: 18755989.
5. J. Byun and N. Li. Purpose based access control for privacy protection in relational database systems. The VLDB Journal, 17(4):603-619, July 2008.
6. J.-W. Byun, E. Bertino, and N. Li. Purpose based access control of complex data for privacy protection. In SACMAT '05: Proceedings of the tenth ACM symposium on Access control models and technologies, pages 102-110, New York, NY, USA, 2005. ACM.
7. P. C. Hung. Towards a privacy access control model for e-Healthcare services. In Proceedings of Annual Conference on Privacy, Security and Trust, 2004.
8. M. Lutes. Privacy and security compliance in the e-healthcare marketplace. Healthcare Financial Management: Journal of the Healthcare Financial Management Association, 54(3):48-50, Mar. 2000. PMID: 10847915.
9. M. Meingast, T. Roosta, and S. Sastry. Security and privacy issues with health care information technology. In Proceedings of the 8th Annual International Conference of the IEEE Engineering in Medicine and Biology, pages 5453-5458, 2006.
10. A. R. Miller and C. E. Tucker. Privacy, network effects and electronic medical record technology adoption. In Proceedings of WEIS, 2007.
11. G. Neumann and M. Strembeck. A scenario-driven role engineering process for functional RBAC roles. In Proceedings of the seventh ACM symposium on Access control models and technologies, page 42, 2002.
12. Q. Ni, A. Trombetta, E. Bertino, and J. Lobo. Privacy-aware role based access control. In Proceedings of the 12th ACM symposium on Access control models and technologies, pages 41-50, Sophia Antipolis, France, 2007. ACM.
13. U. S. D. of Health and H. S. O. P. Brief. Summary of the HIPAA privacy rule. http://www.hhs.gov/ocr/privacy/hipaa/understanding/summary/index.html, May 2003. Summary of the HIPAA Privacy Rule.
14. D. Raths. Policy tech trends 2010. trend: privacy. Healthcare Informatics: The Business Magazine for Information and Communication Systems, 27(2):20, 22-23, Feb. 2010. PMID: 20218064.
15. J. Reid, I. Cheong, M. Henricksen, and J. Smit. A novel use of RBAC to protect privacy in distributed health care information systems. In Information Security and Privacy, page 220. Springer Berlin / Heidelberg, 2003.
16. R. Sandhu, V. Bhamidipati, E. Coyne, S. Ganta, and C. Youman. The ARBAC97 model for role-based administration of roles: preliminary description and outline. In Proceedings of the second ACM workshop on Role-based access control, pages 41-50, Fairfax, Virginia, United States, 1997. ACM.
17. M. Xu and D. Wijesekera. A role-based XACML administration and delegation profile and its enforcement architecture. In Proceedings of the 2009 ACM workshop on Secure web services, pages 53-60, 2009.
18. N. Yang, H. Barringer, and N. Zhang. A Purpose-Based access control model. In Information Assurance and Security, 2007. IAS 2007. Third International Symposium on, pages 143-148, 2007.