Privilege management and access control in Shared Care IS and EHR.
Realising the shared care concept based on distributed health information systems, we have to meet the challenge for advanced security and privacy based on a Public Key Infrastructure (PKI) Beside strong authentication, authorisation of principals and access control using role concepts and security object classification schemes are essential application security services. The paper presents the actual drafts of ISO and CEN standards dealing with privilege management and access control.
Blobel
Bernd
B
University Hospital Magdeburg, Germany. bernd.blobel@mrz.uni-magdeburg.de
Nordberg
Ragnar
R
D022126:Access to Information; D016494:Computer Security; D003219:Confidentiality; D006801:Humans; D016347:Medical Records Systems, Computerized / Q000458:organization & administration / Q000592:standards*; D012637:Security Measures