Framework and prototype for a secure XML-based electronic health records system.
Security of personal medical information has always been a challenge for the advancement of Electronic Health Records (EHRs) initiatives. eXtensible Markup Language (XML), is rapidly becoming the key standard for data representation and transportation. The widespread use of XML and the prospect of its use in the Electronic Health (e-health) domain highlights the need for flexible access control models for XML data and documents. This paper presents a declarative access control model for XML data repositories that utilises an expressive XML role control model. The operational semantics of this model are illustrated by Xplorer, a user interface generation engine which supports search-browse-navigate activities on XML repositories.
Faculty of Information Technology, University of Technology, Sydney, Broadway, NSW 2007, Australia. rsteele@it.uts.edu.au
Robert
R
Steele
William
W
Gardner
Darius
D
Chandra
Tharam S
TS
Dillon
D016494:Computer Security / Q000295:instrumentation*; D003219:Confidentiality; D006801:Humans; D008498:Medical Record Linkage / Q000295:instrumentation*; D016347:Medical Records Systems, Computerized / Q000295:instrumentation* / Q000458:organization & administration*; D011381:Programming Languages; D018511:Systems Integration; D014584:User-Computer Interface