title: Privilege management and access control in Shared Care IS and EHR.
abstract: Realising the shared care concept based on distributed health information systems, we have to meet the challenge for advanced security and privacy based on a Public Key Infrastructure (PKI) Beside strong authentication, authorisation of principals and access control using role concepts and security object classification schemes are essential application security services. The paper presents the actual drafts of ISO and CEN standards dealing with privilege management and access control.
authors.affiliation: University Hospital Magdeburg, Germany. bernd.blobel@mrz.uni-magdeburg.de
authors.forename: Bernd
authors.initials: B
authors.lastname: Blobel
authors.forename: Ragnar
authors.initials: R
authors.lastname: Nordberg
mesh_terms: D022126:Access to Information; D016494:Computer Security; D003219:Confidentiality; D006801:Humans; D016347:Medical Records Systems, Computerized / Q000458:organization & administration / Q000592:standards*; D012637:Security Measures