title: Dynamic access control model for privacy preserving personalized healthcare in cloud environment.
abstract: When sharing and storing healthcare data in a cloud environment, access control is a central issue for preserving data privacy as a patient's personal health data may be accessed without permission from many stakeholders. Specifically, dynamic authorization for the access of data is required because personal health data is stored in cloud storage via wearable devices. Therefore, we propose a dynamic access control model for preserving the privacy of personal healthcare data in a cloud environment. The proposed model considers context information for dynamic access. According to the proposed model, access control can be dynamically determined by changing the context information; this means that even for a subject with the same role in the cloud, access permission is defined differently depending on the context information and access condition. Furthermore, we experiment the ability of the proposed model to provide correct responses by representing a dynamic access decision with real-life personalized healthcare system scenarios.
authors.affiliation: Department of Computer Science and Engineering, Korea University, Seoul, Korea.
authors.forename: Jiseong
authors.initials: J
authors.lastname: Son
authors.affiliation: Department of Computer Science and Engineering, Korea University, Seoul, Korea.
authors.forename: Jeong-Dong
authors.initials: JD
authors.lastname: Kim
authors.affiliation: Department of Information Technology, The Cyber University of Korea, Seoul, Korea.
authors.forename: Hong-Seok
authors.initials: HS
authors.lastname: Na
authors.affiliation: Department of Computer Science and Engineering, Korea University, Seoul, Korea.
authors.forename: Doo-Kwon
authors.initials: DK
authors.lastname: Baik
mesh_terms: D003219:Confidentiality; D006801:Humans; D016247:Information Storage and Retrieval / Q000592:standards*; D020407:Internet / Q000592:standards*; D016347:Medical Records Systems, Computerized / Q000592:standards*; D008962:Models, Theoretical; D018907:Privacy
keywords: Privacy protection; cloud environment; dynamic access control; ontological concept; personalized healthcare