Logo eprints

On a Formal and User-friendly Linguistic Approach to Access Control of Electronic Health Data

Margheri, Andrea and Masi, Massimiliano and Pugliese, Rosario and Tiezzi, Francesco On a Formal and User-friendly Linguistic Approach to Access Control of Electronic Health Data. In: HEALTHINF 2013 - Proceeding of 6th International Conference on Health Informatics (HEALTHINF). SciTePress, pp. 263-268. ISBN 978-989-8565-37-2 (2013)

[img]
Preview
PDF
Download (248kB) | Preview

Abstract

The importance of the exchange of Electronic Health Records (EHRs) between hospitals has been recognized by governments and institutions. Due to the sensitivity of data exchanged, only mature standards and implementations can be chosen to operate. This exchange process is of course under the control of the patient, who decides who has the rights to access her personal healthcare data and who has not, by giving her personal privacy consent. Patients’ privacy consent is regulated by local legislations, which can vary frequently from region to region. The technology implementing such privacy aspects must be highly adaptable, often resulting in complex security scenarios that cannot be easily managed by patients and software designers. To overcome such security problems, we advocate the use of a linguistic approach that relies on languages for expressing policies with solid mathematical foundations. Our approach bases on FACPL, a policy language we have intentionally designed by taking inspiration from OASIS XACML, the de-facto standard used in all projects covering secure EHRs transmission protected by patients’ privacy consent. FACPL can express policies similar to those expressible by XACML but, differently from XACML, it has an intuitive syntax, a formal semantics and easy to use software tools supporting policy development and enforcement. In this paper, we present the potentialities of our approach and outline ongoing work.

Item Type: Book Section
Uncontrolled Keywords: Data Security; Electronic Health Records; Access Control.
Subjects: Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Research Area: Computer Science and Applications
Depositing User: Users 31 not found.
Date Deposited: 02 May 2013 12:12
Last Modified: 29 Jan 2014 11:37
URI: http://eprints.imtlucca.it/id/eprint/1572

Actions (login required)

Edit Item Edit Item