A Novel Reference Security Model with the Situation Based Access Policy for Accessing EPHR Data.
Electronic Patient Health Record (EPHR) systems may facilitate a patient not only to share his/her health records securely with healthcare professional but also to control his/her health privacy, in a convenient and easy way even in case of emergency. In order to fulfill these requirements, it is greatly desirable to have the access control mechanism which can efficiently handle every circumstance without negotiating security. However, the existing access control mechanisms used in healthcare to regulate and restrict the disclosure of patient data are often bypassed in case of emergencies. In this article, we propose a way to securely share EPHR data under any situation including break-the-glass (BtG) without compromising its security. In this regard, we design a reference security model, which consists of a multi-level data flow hierarchy, and an efficient access control framework based on the conventional Role-Based Access Control (RBAC) and Mandatory Access Control (MAC) policies.
iTrust, Centre for Research in Cyber Security, Singapore University of Technology and Design, Singapore, Singapore. gope_prosanta@sutd.edu.sg.
Prosanta
P
Gope
Department of Computer Science & Engineering, Thapar university, Patiala, Punjab, India.
Ruhul
R
Amin
D016494:Computer Security / Q000295:instrumentation*; D003219:Confidentiality; D057286:Electronic Health Records / Q000295:instrumentation*; D066275:Health Information Exchange; D006801:Humans
Access control; Break-the-glass; EPHR; Mac; RBAC
J Am Med Inform Assoc. 2002 Mar-Apr;9(2):171-80
11861632
IEEE Trans Inf Technol Biomed. 2003 Sep;7(3):202-7
14518734
J Biomed Inform. 2008 Dec;41(6):1028-40
18511349
J Med Syst. 2015 Mar;39(3):33
25681100