AC-ABAC: Attribute-based access control for electronic medical records during acute care

Oliveira, Marcela T. de; Verginadis, Yiannis; Reis, Lúcio Henrik Amorim; Psarra, Evgenia; Patiniotakis, Ioannis; Olabarriaga, Sílvia D.

doi:10.1016/j.eswa.2022.119271

Cited by 18 publications

(7 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The main purpose of an EMR system is the availability of patient data. In this sense, access control should not prevent any legitimate request on behalf of the vital interest of patients [36].…”

Section: Security and Privacy Challenges In Accessing Health Datamentioning

confidence: 99%

“…While the ABAC model offers greater granularity in accessing patient information, its application in real health scenarios, especially during intensive care, poses challenges due to data sharing between organizations. This limitation may leave intensive care without adequate access protection in existing ABAC-based access control models [36]. Purpose-based access control (PBAC) aims to relate data to specific purposes.…”

Section: Medical Data Access Controlmentioning

confidence: 99%

See 1 more Smart Citation

Storage Standards and Solutions, Data Storage, Sharing, and Structuring in Digital Health: A Brazilian Case Study

Oliveira,

Santos,

Mendes

et al. 2023

Information

Self Cite

View full text Add to dashboard Cite

The COVID-19 pandemic has highlighted the necessity for agile health services that enable reliable and secure information exchange, but achieving proper, private, and secure sharing of EMRs remains a challenge due to diverse data formats and fragmented records across multiple data silos, resulting in hindered coordination between healthcare teams, potential medical errors, and delays in patient care. While centralized EMR systems pose privacy risks and data format diversity complicates interoperability, blockchain technology offers a promising solution by providing decentralized storage, ensuring data integrity, enhancing access control, eliminating intermediaries, and increasing efficiency in healthcare. By focusing on a Brazilian case study, this paper explores the significance of EMR standards, security challenges, and blockchain-based approaches to promote interoperability and secure data sharing in the healthcare industry.

show abstract

Section: Security and Privacy Challenges In Accessing Health Datamentioning

confidence: 99%

Section: Medical Data Access Controlmentioning

confidence: 99%

Storage Standards and Solutions, Data Storage, Sharing, and Structuring in Digital Health: A Brazilian Case Study

Oliveira,

Santos,

Mendes

et al. 2023

Information

Self Cite

View full text Add to dashboard Cite

show abstract

“…Por último o PEP executa a decisão do PDP (9). Devido à complexidade da operac ¸ão dos sistemas de EMR, o controle de acesso pode não ser adequadamente configurado, resultando em maior permissividade do que a necessária [ de Oliveira et al, 2023]. A implementac ¸ão do modelo ABAC nos sistemas de EMR permite alcanc ¸ar maior granularidade no controle de acesso às informac ¸ões.…”

Section: A Ferramenta Smartmedunclassified

“…Contudo, essa implementac ¸ão é desafiadora devido à dificuldade de modelagem para compartilhamento de dados entre organizac ¸ões, por exemplo durante cuidados intensivos. Por essa razão, o controle de acesso baseado em ABAC nesses sistemas normalmente não consideram o cenário de cuidados intensivos [ de Oliveira et al, 2023]. A ferramenta SmartMed permite a implementac ¸ão completa do modelo ABAC, para qualquer cenário de cuidados médicos, com ou sem compartilhamento de informac ¸ão entre entidades distintas.…”

Section: A Ferramenta Smartmedunclassified

SmartMed: Uma Ferramenta de Controle de Acesso a Dados de Saúde baseado em Contratos Inteligentes

Santos,

Reis,

Barbosa

et al. 2023

Anais Estendidos Do XXIII Simpósio Brasileiro De Segurança Da Informação E De Sistemas Computacionais (SBSeg Estendido 2023)

View full text Add to dashboard Cite

Este artigo propõe o SmartMed, uma ferramenta que visa controlar o acesso a dados médicos distribuídos por meio de contratos inteligentes executados em uma cadeia de blocos privada. A SmartMed facilita o acesso a vários sistemas digitais de saúde e sua interoperabilidade, permitindo acesso seguro e ágil às informações armazenadas em silos de dados não padronizados e heterogêneos, garantindo a conformidade com os regulamentos e leis de privacidade dos dados. Os contratos inteligentes garantem à ferramenta a adequação a requisitos de segurança, pois as transações de acesso a dados confidenciais são executadas e registradas de forma imutável, fornecendo uma trilha de auditoria completa para acesso a dados confidenciais. A demonstração na SBSeg tem como foco a rastreabilidade em sistemas de prontuário eletrônico através da integração com a SmartMed pelo protocolo OAuth2.0 para autenticação e controle de acesso.

show abstract

“…Apart from CP-ABE, the access control method is a promising approach to realize secure data sharing with little computational costs in IoT-enabled applications [16]. Role-Based Access Control (RBAC) [17] and Attribute-Based Access Control (ABAC) model [18] are the most frequently used models. However, these models usually rely on semi-trusted permission validators and lack the ability to track and audit malicious behaviors.…”

Section: Introductionmentioning

confidence: 99%

A Smart Contract-Driven Access Control Schemewith Integrity Checking for Electronic Health Records

Li,

Xiao

et al. 2023

Preprint

View full text Add to dashboard Cite

The application of healthcare systems has led to an explosive growth in personal electronic health records (EHRs). These EHRs are generated from different healthcare institutions and stored in cloud data centers, respectively. However, data owners lose the authority to control and track their private and sensitive EHRs. In fact, data owners cannot establish rules for EHRs exchanging and sharing, nor can they verify the integrity of EHRs stored in semi-trusted clouds. Hence, a individual-centric access control framework is required to realize data access control. In this study, we construct a data access control framework, which integrates the decentralized smart contracts and role-based access control (RBAC) to provide fine grained data access control services. Besides, this scheme allows data owners to define access control policies using JavaScript Object Notation (JSON) and further translate these policies into immutable blockchain transactions. Furthermore, we combine blockchain and bilinear mapping to design a data integrity verification system for users to check the integrity of their cloud stored EHRs. Finally, we analyze the security of this scheme and develop a prototype system to evaluate the performance. Both theoretical analysis and experiment results indicate that this scheme can realize fine-grained data access control and efficient data integrity verification

show abstract

AC-ABAC: Attribute-based access control for electronic medical records during acute care

Cited by 18 publications

References 13 publications

Storage Standards and Solutions, Data Storage, Sharing, and Structuring in Digital Health: A Brazilian Case Study

Storage Standards and Solutions, Data Storage, Sharing, and Structuring in Digital Health: A Brazilian Case Study

SmartMed: Uma Ferramenta de Controle de Acesso a Dados de Saúde baseado em Contratos Inteligentes

A Smart Contract-Driven Access Control Schemewith Integrity Checking for Electronic Health Records

Contact Info

Product

Resources

About