How to break access control in a controlled manner

• Tipo: Artigo em Livro de Atas de Conferência Internacional
• Data: 2006

Autores

ferreira, a (Autor) FMUP; cruz-correia, r (Autor) FMUP; antunes, l (Autor) FCUP; farinha, p (Autor) Outra; oliveira-palhares, e (Autor) Outra; chadwick, dw (Autor) Outra; costa-pereira, a (Autor) FMUP

Ata de Conferência Internacional

Título: 19TH IEEE INTERNATIONAL SYMPOSIUM ON COMPUTER-BASED MEDICAL SYSTEMS, PROCEEDINGS

Páginas: 847-851

19th IEEE Symposium on Computer-Based Medical Systems

Salt Lake City, UT, JUN 22-23, 2006

Indexação

ISI Web of Knowledge - 65 Citações

Scopus - 100 Citações

Classificação Científica

FOS: Ciências exactas e naturais > Ciências da computação e da informação

Outras Informações

ID Authenticus: P-004-QYN

DOI: 10.1109/cbms.2006.95

Abstract (EN): The Electronic Medical Record (EMR) integrates heterogeneous information within a Healthcare Institution stressing the need for security and access control. The Biostatistics and Medical Informatics Department from Porto Faculty of Medicine has recently implemented a Virtual EMR (VEMR) in order to integrate patient information and clinical reports within a university hospital. With more than 500 medical doctors using the system on a daily basis, an access control policy and model were implemented. However, the healthcare environment has unanticipated situations (i.e. emergency situations) where access to information is essential. Most traditional policies do not allow for overriding. A policy that allows for "Break-The-Glass (BTG)" was implemented in order to override access control whilst providing for non-repudiation mechanisms for its usage. The policy was easily integrated within the model confirming its modularity and the fact that user intervention in defining security procedures is crucial to its successful implementation and use.

Idioma: Inglês

Tipo (Avaliação Docente): Científica

Nº de páginas: 5