title: Modelling privilege management and access control.
abstract: OBJECTIVE
  For establishing trustworthiness in advanced architectures for future-proof health information systems being open, flexible, scaleable, portable, and semantically interoperable, security and privacy services needed must be designed as an inherent part of the architecture. Such architecture has to meet the paradigms of distribution, component orientation, formal modelling, separation of logical and technological aspects, etc.
  
  
  METHODS
  In model-driven architectures components providing security and privacy services have to be specified using the same methodology of formal models with meta-languages as expression means, as deployed in computational, technical, or medical domains. The resulting approach must be based on the ISO Reference Model-Open Distributed Processing.
  
  
  RESULTS
  Currently, standards developing organisation are defining emerging tasks and standards for semantic interoperability and trustworthy collaboration for advanced health information systems. Communication security issues have been specified and implemented, while application security challenges such as privilege management and access control are still under development. Therefore, a series of formal models have been developed by the authors covering, e.g. domains, service delegation, claims control, policies, roles, authorisations, and access control. The required models are introduced and interpreted in a generic way. The crucial concept of security policy and its relationship to the other concepts has been considered in detail.
  
  
  CONCLUSIONS
  Based on formal models, security services can be integrated into advanced systems architectures enabling semantic interoperability in the context of trustworthiness of communication and co-operation.
authors.affiliation: Fraunhofer Institute for Integrated Circuits IIS, Health Telematics Project Group, Am Wolfsmantel 33, D-91058 Erlangen, Germany. bernd.blobel@iis.fraunhofer.de
authors.forename: Bernd
authors.initials: B
authors.lastname: Blobel
authors.forename: Ragnar
authors.initials: R
authors.lastname: Nordberg
authors.forename: John Mike
authors.initials: JM
authors.lastname: Davis
authors.forename: Peter
authors.initials: P
authors.lastname: Pharow
mesh_terms: D022126:Access to Information; D016494:Computer Security; D003198:Computer Simulation