Comparing the context and the SitBAC models for privacy preservation in terms of model understanding and synthesis.
There is an increasing interest in preserving patients' privacy while accessing Electronic Health Record (EHR) data. Two models that support representation of data-request authorization policies are the Contextual Role-Based Access Control (Context) model [1] and the Situation-Based Access Control (SitBAC) model [2]. We conducted a controlled experiment that compared the two models with respect to model-understanding and model-synthesis.
Beimel
Dizza
D
Faculty of Industrial Engineering, Technion, Israel Institute of Technology, Haifa, Israel.
Peleg
Mor
M
D022126:Access to Information; D016494:Computer Security; D003219:Confidentiality; D016247:Information Storage and Retrieval / Q000379:methods; D007557:Israel; D016347:Medical Records Systems, Computerized; D008962:Models, Theoretical