title: A model for consent-based privilege management in personal electronic health records.
abstract: One of the biggest issues in the domain of standardized, regional, crossinstitutional, personal, electronic health records is the privilege management. While many health information exchange projects use IHE-based architectures there are still unsolved questions regarding the restricting parameters a patient can use in the electronic consent configuring access control. This work determines these parameters, derives an information model of privilege management, introduces a set representation of the model and shows how to apply them to EHR architectures. The introduced model can serve as framework for health information exchanges using a consent-based privilege management. The set representation can help to understand the complexity of consent representations.
authors.affiliation: University Hospital Heidelberg, Department of Information Technology and Medical Engineering, Heidelberg, Germany.
authors.forename: Oliver
authors.initials: O
authors.lastname: Heinze
authors.affiliation: University Hospital Heidelberg, Department of Information Technology and Medical Engineering, Heidelberg, Germany.
authors.forename: Björn
authors.initials: B
authors.lastname: Bergh
mesh_terms: D003219:Confidentiality / Q000592:standards*; D057286:Electronic Health Records / Q000592:standards*; D017408:Guidelines as Topic; D055991:Health Records, Personal; D016247:Information Storage and Retrieval / Q000592:standards; D007258:Informed Consent / Q000592:standards*; D038622:Internationality; D008498:Medical Record Linkage / Q000592:standards*; D008962:Models, Theoretical; D010358:Patient Participation