Towards dynamic access control for healthcare information systems.
Access control is a key feature of healthcare information systems to protect the privacy of patients and to ensure access to information as required by healthcare professionals. A problem with many existing access control mechanisms is their static nature. In this paper we propose combining workflow information from medical guidelines, observations and audit logs to create dynamic access rules that are adapted to the actual workings of a hospital. Our aim is to help minimize the use of "break the glass" access.
Røstad
Lillian
L
Department of Computer and Information Science, Norwegian University of Science and Technology, Trondheim, Norway.
Nytrø
Oystein
O
D022126:Access to Information; D003195:Computer Communication Networks; D016494:Computer Security; D006751:Hospital Information Systems; D006801:Humans; D019451:Information Management; D008492:Medical Informatics Computing; D008498:Medical Record Linkage; D016347:Medical Records Systems, Computerized; D009664:Norway; D010355:Patient Identification Systems; D017410:Practice Guidelines as Topic; D018511:Systems Integration