A secure RBAC mobile agent access control model for Healthcare Institutions

• Type: Article in International Conference Proceedings Book
• Date: 2013

Authors

Catia Santos Pereira (Author) Other; Alexandre B Augusto (Author) Other; Ricardo Cruz Correia (Author) Other; Manuel E Correia (Author) FCUP

Conference proceedings International

Title: 2013 IEEE 26TH INTERNATIONAL SYMPOSIUM ON COMPUTER-BASED MEDICAL SYSTEMS (CBMS)

Pages: 349-354

26th IEEE International Symposium on Computer-Based Medical Systems (CBMS)

Porto, PORTUGAL, JUN 20-22, 2013

Indexing

ISI Web of Knowledge - 19 Citations

Scopus - 24 Citations

Scientific classification

FOS: Engineering and technology > Electrical engineering, Electronic engineering, Information engineering

Other information

Authenticus ID: P-008-J09

DOI: 10.1109/cbms.2013.6627814

Abstract (EN): In medical organizations, healthcare providers need to have fast access to patients' medical information in order to make accurate diagnoses as well as to provide appropriate treatments. Efficient healthcare is thus highly dependent on doctors being provided with access to patients' medical information at the right time and place. However it frequently happens that critical pieces of pertinent information end up not being used because they are located in information systems that do not inter-operate in a timely manner. Unfortunately the standard operational mode for many healthcare applications, and even healthcare institutions, is to be managed and operated as isolated islands that do not share information in an efficient manner. There are many reasons that contribute to this grim state of affairs, but what interests us the most is the lack of enforceable security policies for systems interoperability and data exchange and the existence of many heterogeneous legacy systems that are almost impossible to directly include into any reasonable secure interoperable workflow. In this paper we propose a RBAC mobile agent access control model supported by a specially managed public key infrastructure for mobile agent's strong authentication and access control. Our aim is to create the right means for doctors to be provided with timely accurate information, which would be otherwise inaccessible, by the means of strongly authenticated mobile agents capable of securely bridging otherwise isolated institutional eHealth domains and legacy applications.

Language: English

Type (Professor's evaluation): Scientific

No. of pages: 6