Privilege management infrastructure for virtual organizations in healthcare grids

IEEE Transactions on Information Technology in Biomedicine

Volumn 15, Issue 2, 2011, Pages 316-323

  Calvillo, Jorge ^a   Román, Isabel ^a   Rivas, Sergio ^a   Roa, Laura M ^a  

^a INSTITUTO DE SALUD CARLOS III   (Spain)

Author keywords

Access control; directory services; privilege management infrastructures (PMI); semantic technologies; service oriented architecture (SOA); virtual organization (VO)

Indexed keywords

ACCESS POLICIES; DECISION POINTS; DESCRIPTORS; DIRECTORY SERVICES; GRID TECHNOLOGIES; HEALTHCARE ENVIRONMENTS; HEALTHCARE RESOURCES; HEALTHCARE SERVICES; MAIN TASKS; MANAGEMENT SERVICE; PRIVILEGE MANAGEMENT INFRASTRUCTURES; PRIVILEGE MANAGEMENT INFRASTRUCTURES (PMI); SEMANTIC TECHNOLOGIES; VIRTUAL ORGANIZATION;

ACCESS CONTROL; ARCHITECTURAL DESIGN; COMPUTATION THEORY; GRID COMPUTING; HEALTH CARE; INFORMATION SERVICES; MIDDLEWARE; ONTOLOGY; SECURITY SYSTEMS; SEMANTIC WEB; SEMANTICS; SERVICE ORIENTED ARCHITECTURE (SOA); TECHNOLOGY;

DECISION MAKING;

ACCESS TO INFORMATION; ARTICLE; COMPUTER SECURITY; COMPUTER SYSTEM; DATA BASE; MEDICAL INFORMATICS; METHODOLOGY;

ACCESS TO INFORMATION; COMPUTER SECURITY; COMPUTER SYSTEMS; DATABASE MANAGEMENT SYSTEMS; MEDICAL INFORMATICS;

EID: 79952466879     PISSN: 10897771     EISSN: None     Source Type: Journal    
DOI: 10.1109/TITB.2010.2104160     Document Type: Article

References (47)

1. T. Erl, SOA Principles of Service Design. Englewood Cliffs, NJ: Prentice-Hall, 2008.
2. The Open Group. (2009). TOGAF, Enterprise edition, version 9. [Online]. Available: http://www.opengroup.org/architecture/togaf9-doc/arch/index.html.
3. I. Foster, C. Kesselman, and S. Tuecke, "The anatomy of the grid: Enabling scalable virtual organizations", Int. J. Supercomput. Appl., vol. 15, no. 3, pp. 200-222, 2001. (Pubitemid 33099013)
4. Health Informatics-Privilege Management and Access Control, ISO 22600-1, 2, 2006.
5. D. Trivellato, F. Spiessens, N. Zannone, and S. Etalle, "POLIPO: Policies & OntoLogies for interoperability, portability, and autonomy", in Proc. Policy, IEEE Comput. Soc., Jul., 2009, pp. 110-113.
6. N. Elahi, M. Chowdhury, and J. Noll, "Semantic access control in web based communities", in Proc. 3rd Int. Multi-Conf. Comput. Global Inform. Technol., Jul./Aug., 2008, pp. 131-136.
7. N. Zhang, L. Yao, A. Nenadic, J. Chin, C. Goble, A. Rector, D. Chadwick, S. Otenko, and Q. Shi, "Achieving fine-grained access control in virtual organizations", Concurrency Comput.: Pract. Exper., vol. 19, pp. 1333-1352, 2007. (Pubitemid 47138384)
8. R. Sinnott, D. Chadwick, T. Doherty, D. Martin, A. Stell, G. Stewart, L. Su, and J. Watt, "Advanced security for virtual organizations: The pros and cons of centralized vs decentralized security models", in Proc. 8th IEEE Int. Symp. Cluster Comput. Grid, May, 2008, pp. 106-113.
9. H. B. Rahmouni, T. Solomonides, M. C. Mont, and S. Shiu, "Ontologybased privacy compliance on European healthgrid domains", Stud. Health Technol. Informat., vol. 147, pp. 183-189, 2009.
10. I. Román, L. Roa, L. Reina, and G. Madinabeitia, "Demographic management in a federated healthcare environment", Int. J. Med. Inf., vol. 75, no. 9, pp. 671-682, 2006. (Pubitemid 44137483)
11. D. Krefting, J. Bart, K. Beronov, O. Dzhimova, J. Falkner, M. Hartung, A. Hoheisel, T. Knoch, T. Lingner, Y. Mohammed, K. Peter, E. Rahm, U. Sax, D. Sommerfeld, T. Steinke, T. Tolxdorff, M. Vossberg, F. Viezens, and A. Weisbecker, "MediGRID: Towards a user friendly secured grid infrastructure", Future Generat. Comput. Syst., vol. 25, no. 3, pp. 326-336, 2009.
12. D. J. Power, E. A. Politou, M. A. Slaymaker, and A. C. Simpson, "Towards secure grid-enabled healthcare", Softw. - Practice Exp., vol. 35, no. 9, pp. 857-871, 2005. (Pubitemid 40972076)
13. D. Olmedilla, O. Rana, B. Matthews, and W. Nejdl, "Security and trust issues in semantic grids", in Proc. Dagsthul Semin. Semi. Grid: Convergence Technol., 2005, p. 05271.
14. Information Technology-Open Systems Interconnection-Security Frameworks for Open Systems, ISO 10181-1, 2, 1996.
15. The Directory: Public-Key and Attribute Certificate Frameworks, ITU-T Rec. X.509, 2008.
16. Internet Security Glossary, RFC 4949, version 2, 2007.
17. Terminology for Policy-Based Management, RFC 3198, 2001.
18. OASIS. (2005). XACML v2.0 Core, eXtensible Access Control Markup Language Version 2.0, OASIS. [Online]. Available: http://www.oasisopen.org/committees/ xacml.
19. S. Cantor J. Kemp R. Philpott E. Maler. (2005). Assertions and protocols for the oasis security assertion markup language (SAML), v2.0, [Online]. Available: http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf.
20. Lightweight Directory Access Protocol, version 2, RFC 3494, 2003.
21. The Directory: Overview, ITU-T Rec. X.500, 2008.
22. Health Informatics-System of Concepts to Support Continuity of Care-Part 1: Basic Concepts, European Committee for Standardization, CEN/TC 251, EN 13940-1, 2006.
23. Health Informatics-Electronic Health Record Communication-Part 4: Security, ISO 13606-4, 2007.
24. Health Informatics-Directory Services for Security, Communications and Identification of Professionals and Patients, ISO 21091, 2005.
25. The Systematized Nomenclature of Medicine (SNOMED) [Online]. Available: http://www.ihtsdo.org/snomed-ct/.
26. A. Rector and W. Nowlan, "The GALEN project", Comput. Methods Programs Biomed., vol. 45, no. 1-2, pp. 75-78, 1994. (Pubitemid 24367269)
27. OBO Foundry. (2010, Jul.). "The open biological and biomedical ontologies", [Online]. Available: http://www.obofoundry.org/.
28. Health Informatics - Service Architecture, ISO 12967-1, 2, 3, 2008.
29. CORBAmed OMG. (2010, Jul.). HDTF standards [Online]. Available: http://healthcare.omg.org/Roadmap/corbamed-roadmap.htm.
30. Information Technology-Open Distributed Processing-Reference Model, ISO 10746-1, 2, 3, 4, 1998 (Revised in 2010).
31. Globus Toolkit Security. (2010, Jul.). [Online]. Available: http://www.globus.org/toolkit/docs/latest-stable/security/.
32. I. Foster, C. Kesselman, L. Pearlman, S. Tuecke, and V. Welch, "The community authorization service: Status and future", presented at the Proc. of the Comput. in High Energy Physics, La Jolla, CA, Mar. 2003.
33. R. Alfieri, R. Cecchini, V. Ciaschini, L. dell'Agnello, A. Frohner, K. Lorentey, and F. Spataro, "From gridmap-file to voms: Managing authorization in a grid environment", Future Generation Comp. Syst., vol. 21, no. 4, pp. 549-558, 2005. (Pubitemid 40304771)
34. Permis (project funded by the ISIS program). (2010, Jul.). [Online]. Available: http://www.permis.org/index.html.
35. P. Patel-Schneider, P. Hayes, and I. Horrocks. (2004). OWL web ontology language semantics and abstract syntax, [Online]. Available: http://www.w3.org/TR/owl-semantics/.
36. T. Finin, A. Joshi, L. Kagal, J. Niu, R. Sandhu, W. Winsborough, and B. Thuraisingham, "ROWLBAC: Representing role based access control in OWL", in Proc. 13th Symp. Access Control Models. Technol., Jun., 2008, pp. 73-82.
37. M. Knechtel, J. Hladik, and F. Dau, "Using OWL DL reasoning to decide about authorization in RBAC", in Proc. OWLED Workshop OWL: Experiences and Directions, 2008.
38. I. Horrocks, P. Patel-Schneider, H. Boley, S. Tabet, B. Grosof, and M. Dean, 2004. SWRL: A semantic web rule language combining OWL and RuleML, [Online]. Available: http://www.w3.org/Submission/SWRL
39. H. Shen, "A semantic-aware attribute-based access control model for web services", Lect. N. Comput. Sci., vol. 5574, pp. 693-703, 2009.
40. Jess Rule Engine. (2010, Jul.). [Online]. Available: http://www. jessrules.com/jess/index.shtml.
41. H. Knublauch, R. Fergerson, N. Noy, and M. Musen, "The protégé OWL plugin: An open development environment for semantic web applications", in Proc. 3rd Int. Semantic Web Conf., 2004, pp. 229-243. (Pubitemid 39743886)
42. P. Herrero, M. E. Hernando, L. Roa, E. Gómez, and A. de Leiva, "PREDIRCAM: Technological platform for the prevention of diabetes mellitus and cardioMetabolic risk", presented at the 2nd Conf. on Advanced Technologies and Treatments for Diabetes, 2009, Athens, Greece.
43. CMS Drupal. (2010, Jul.). [Online]. Available: http://drupal.org.
44. MDS. (2010, Jul.). [Online]. Available: http://www.globus.org/toolkit/ mds/.
45. Login Certificate Module. (2010, Jul.). [Online]. Available: http://drupal.org/project/certificatelogin.
46. Information Technology-Open Distributed Processing-Reference Model-Enterprise Language, ISO 15414, 2006.
47. Information Technology-Open Distributed Processing-Use of UML for ODP System Specifications, ISO 19793, 2008.