title: Comparing the context and the SitBAC models for privacy preservation in terms of model understanding and synthesis.
abstract: There is an increasing interest in preserving patients' privacy while accessing Electronic Health Record (EHR) data. Two models that support representation of data-request authorization policies are the Contextual Role-Based Access Control (Context) model [1] and the Situation-Based Access Control (SitBAC) model [2]. We conducted a controlled experiment that compared the two models with respect to model-understanding and model-synthesis.
authors.affiliation: Faculty of Industrial Engineering, Technion, Israel Institute of Technology, Haifa, Israel.
authors.forename: Dizza
authors.initials: D
authors.lastname: Beimel
authors.forename: Mor
authors.initials: M
authors.lastname: Peleg
mesh_terms: D022126:Access to Information; D016494:Computer Security; D003219:Confidentiality; D016247:Information Storage and Retrieval / Q000379:methods; D007557:Israel; D016347:Medical Records Systems, Computerized; D008962:Models, Theoretical