Hierarchical data security in a Query-By-Example interface for a shared database.
Whenever a shared database resource, containing critical patient data, is created, protecting the contents of the database is a high priority goal. This goal can be achieved by developing a Query-By-Example (QBE) interface, designed to access a shared database, and embedding within the QBE a hierarchical security module that limits access to the data. The security module ensures that researchers working in one clinic do not get access to data from another clinic. The security can be based on a flexible taxonomy structure that allows ordinary users to access data from individual clinics and super users to access data from all clinics. All researchers submit queries through the same interface and the security module processes the taxonomy and user identifiers to limit access. Using this system, two different users with different access rights can submit the same query and get different results thus reducing the need to create different interfaces for different clinics and access rights.
Taylor
Merwyn
M
Department of Pathology, Johns Hopkins University, 600 North Wolfe Street, Carnegie 469, Baltimore, MD 21287, USA. mgtaylor@jhmi.edu
D016494:Computer Security; D003219:Confidentiality; D003628:Database Management Systems; D016208:Databases, Factual; D006801:Humans; D033181:Information Dissemination / Q000379:methods; D016247:Information Storage and Retrieval / Q000379:methods*; D016347:Medical Records Systems, Computerized; D012985:Software Design; D014584:User-Computer Interface