Audit-Based Access Control for Electronic Health Records

Share/Save/Bookmark

Dekker, M.A.C. and Etalle, S. (2006) Audit-Based Access Control for Electronic Health Records. [Report]

[img]
Preview
PDF
237Kb
Abstract:Traditional access control mechanisms aim to prevent illegal actions a-priori occurrence, i.e. before granting a request for a document. There are scenarios however
where the security decision can not be made on the fly. For these settings we developed a language and a framework for a-posteriori access control. In this paper we
show how the framework can be used in a practical scenario. In particular, we work
out the example of an Electronic Health Record (EHR) system, we outline the full
architecture needed for audit-based access control and we discuss the requirements
and limitations of this approach concerning the underlying infrastructure and its users.
Item Type:Report
Faculty:
Electrical Engineering, Mathematics and Computer Science (EEMCS)
Research Group:
Link to this item:http://purl.utwente.nl/publications/66381
Export this item as:BibTeX
EndNote
HTML Citation
Reference Manager

 

Repository Staff Only: item control page

Metis ID: 237411