Using risk in access control for cloud-assisted ehealth

Proceedings of the 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012

Volumn , Issue , 2012, Pages 1047-1052

  Sharma, Meeta ^a   Bai, Yan ^a   Chung, Sam ^a   Dai, Lirong ^b  

^a UNIVERSITY OF WASHINGTON   (United States)

^b SEATTLE UNIVERSITY   (United States)

Author keywords

access control; cloud computing; eHealth; HL7; security

Indexed keywords

ACCESS DELAY; CONTEXT-AWARE ACCESS CONTROL; CONTROL TECHNIQUES; CUTTING EDGE TECHNOLOGY; EHEALTH; HL7; MEDICAL INFORMATION; PROTOTYPE IMPLEMENTATIONS; SECURITY; TASK-BASED ACCESS CONTROL;

CLOUD COMPUTING; EMBEDDED SOFTWARE;

ACCESS CONTROL;

EID: 84870401072     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/HPCC.2012.153     Document Type: Conference Paper

References (14)

1. D. Wawrzyniak, "Information Security Risk Assessment Model for Risk Management," Springer Lecture Notes in Computer Science, Volume 4083/2006, pp. 21-30.
2. P.-C. Cheng, P. Rohatgi, C. Keser, P. A. Karger, G. M. Wagner, and A. S. Reninger, "Fuzzy Multi-level Security: An Experiment on Quantified Risk Adaptive Access Control," in the Proc. of 2007 IEEE Symposium on Security and Privacy, Los Alamitos, CA, May 2007, pp. 222-230.
3. H. Lohr, A.-R. Sadeghi and M. Winandy, "Securing the E-Health Cloud," in the Proc. of the 1st ACM International Health Informatics Symposium, Arlington, VA , Nov. 2010, pp. 220-229.
4. R. Zhang and L. Liu, "Security Models and Requirements for Healthcare Application Clouds," in the Proc. 2010 IEEE 3rd International Conference on Cloud Computing, Miami, FL, July 2010, pp. 268-275.
5. L. Zhang, A. Brodsky, and S. Jajodia, "Toward Information Sharing: Benefit and Risk Access Control (barac)," in the Proc. of the Seventh IEEE International Workshop on Policies for Distributed Systems and Networks. Washington, DC, USA, 2006, pp. 45-53.
6. R. McGraw, "Risk-adaptable Access Control (RADAC)," NIST - National Institute of Standards and Technology - Information Technology Laboratory Privilege (Access) Management Workshop, Sept. 2009.
7. M. Meglic M and et.al, "Feasibility of an eHealth Service to Support Collaborative Depression Care: Results of a Pilot Study," Journal of Medical Internet Research, Dec. 2010; 12(5):e63.
8. J. Lin and et.al., "Fine-grained Data Access Control Systems with User Accountability in Cloud Computing," in the Proc. of 2010 IEEE Second International Conference on Cloud Computing Technology and Science (CloudCom), Nov/Dec 2010, Indianapolis, IN, pp. 89-96.
9. J. K. Zhang, W. Xu, and D. Ewins, "System Interoperability Study for Healthcare Information System with Web Services," Journal of Computer Science 3 (7): 515-522, 2007.
10. HL7: www.hl7.org, accessed on March 7, 2012.
11. N. Liu and J. Li, "Design and Implementation of Embedded Medical Data Transmission Platform Based on HL7/XML System," Journal of Convergence Information Technology, Volume 6, No. 7, pp. 274-280, July 2011.
12. H. A. J. Narayanan and M. H. Gunes, "Ensuring Access Control in Cloud Provisioned Healthcare Systems," in the Proc. of IEEE Consumer Communications and Networking Conference (CCNC) 2011, Las Vegas, NV, Jan. 2011, 247-251.
13. N. N. Diep, L. X. Hung, Y. Zhung, S. Lee, Y.-K. Lee, H. Lee, "Enforcing Access Control Using Risk Assessment," Universal Multiservice Networks, 2007. ECUMN '07. Fourth European Conference on , vol., no., pp.419-424, Feb. 2007
14. R. A. Shaikh, K. Adi, L. Logrippo, S. Mankovski, "Risk-based decision method for access control systems," Privacy, Security and Trust (PST), 2011 Ninth Annual International Conference on , vol., no., pp.189-192, 19-21 July 2011.