Privacy and Access Control for IHE-Based Systems

Katt, Basel; Breu, Ruth; Hafner, Micahel; Schabetsberger, Thomas; Mair, Richard; Wozak, Florian

doi:10.1007/978-3-642-00413-1_18

Cited by 8 publications

(8 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Katt et al [24] propose an architecture that enables access control for cross-domain document exchanges according to policies that are stored in a central repository. Jin et al [25] propose an access control scheme that supports patient-centric selective sharing of EHRs (Electronic Health Records).…”

Section: G Policy Applied In Healthcare Domainmentioning

confidence: 99%

A Sticky Policy Framework for Big Data Security

Zhang

Gao

et al. 2015

2015 IEEE First International Conference on Big Data Computing Service and Applications

View full text Add to dashboard Cite

Big data security is one of the hottest research topics in big data computing and service applications, because of the lack of research results and mature security technologies and solutions to provide adequate big data security. Big data security faces the need to effectively enforce security policies to protect sensitive data. Trying to satisfy this need, a security policy solution is presented in the paper. Firstly, an implementationindependent and fine-grained policy meta-model is proposed for abstraction from underlying technologies and better reuse. Then, a sticky policy framework is adopted with policy enforcement and evaluation discussed in detail. Finally, a healthcare scenario is used to evaluate the process of policy modeling and enforcement.

show abstract

Section: G Policy Applied In Healthcare Domainmentioning

confidence: 99%

A Sticky Policy Framework for Big Data Security

Zhang

Gao

et al. 2015

2015 IEEE First International Conference on Big Data Computing Service and Applications

View full text Add to dashboard Cite

show abstract

“…This concept has been implemented as mandatory access control using a reference monitor (Anderson, 1972) in Kerberos (Kohl and Neuman, 1993). A similar concept is shown for a distributed document repository (Katt et al, 2009), largely following the XACML-nomenclature. The concept of a trusted authorization service can also be used with cryptographic access tokens.…”

Section: Trusted Authorization Servicesmentioning

confidence: 99%

A Dependable and Secure Authorisation Service in the Cloud

2012

Proceedings of the 2nd International Conference on Cloud Computing and Services Science

View full text Add to dashboard Cite

Cloud-based exchange of sensitive data demands the enforcement of fine-grained and flexible access rights, that can be time-bounded and revoked at any time. In a setting that does not rely on trusted computing bases on the client side, these access control features require a trusted authorization service that mediates access control decisions. Using threshold cryptography, we present an implementation scheme for a distributed authorization service which improves reliability over a single service instance and limits the power and responsibility of single authorization service nodes.

show abstract

“…Katt et al [4] implements a similar architecture to the eMOLST project, wherein it implements distributed XDS Repositories and allows access to the system via a Web portal. The research only discusses authentication to the system from the centralized Web portal, containing a single user directory, resulting in a more centralized authentication approach.…”

Section: Related Workmentioning

confidence: 99%

“…For many different types of actors (users, applications, etc.) and transactions (operations between actors) common to real-life healthcare use cases, IHE has formulated these sets of guidelines into integration profiles [4].…”

Section: Ihementioning

confidence: 99%

eMOLST: a documentation flow for distributed health informatics

Laszewski

Dayal

Wang

2011

Concurrency and Computation

View full text Add to dashboard Cite

SUMMARYElectronic Health Records (EHRs) have many potential advantages over traditional paper records, such as wide scale access, error checking, and protection from physical damage to a record. As with any medical record, paper or electronic, both the patient's privacy and the document's integrity must be guaranteed. With initiatives such as Integrating the Healthcare Enterprise (IHE), computerized healthcare systems are able to share EHRs on a large scale, while protecting the patient's privacy rights. However, IHE does not yet meet the needs of all healthcare systems, as we will show with the eMOLST project. The eMOLST project delivers software in support of Medical Order for Life Sustaining Treatment (MOLST) forms and uses IHE specifications for cross enterprise document storage and sharing, patient identification, and user authentication and authorization. The Web-based system provides secure access to electronic MOLST documents regardless of the patient's or healthcare provider's location. The eMOLST project allows a user to have Single Sign On (SSO) access to the system from either the user's associated enterprise, or through a Web portal shared amongst all users across all enterprises. In this paper, we show a security solution to allow SSO from multiple access points for IHE compliant systems.

show abstract

Privacy and Access Control for IHE-Based Systems

Cited by 8 publications

References 7 publications

A Sticky Policy Framework for Big Data Security

A Sticky Policy Framework for Big Data Security

A Dependable and Secure Authorisation Service in the Cloud

eMOLST: a documentation flow for distributed health informatics

Contact Info

Product

Resources

About