Usable Access Control Policy and Model for Healthcare

• Type: Article in International Conference Proceedings Book
• Date: 2011

Authors

ferreira, a (Author) FMUP; correia, r (Author) FMUP; brito, m (Author) Other; antunes, l (Author) FCUP

Conference proceedings International

Title: 2011 24TH INTERNATIONAL SYMPOSIUM ON COMPUTER-BASED MEDICAL SYSTEMS (CBMS)

Pages: 1-6

24th International Symposium on Computer-Based Medical Systems (CBMS)

Bristol, ENGLAND, JUN 27-30, 2011

Indexing

ISI Web of Knowledge - 2 Citations

Scopus - 14 Citations

Scientific classification

FOS: Natural sciences > Computer and information sciences

Other information

Authenticus ID: P-002-X68

DOI: 10.1109/CBMS.2011.5999035

Abstract (EN): Access control defines what users can perform within a system. It is usually defined by software engineers and end users are seldom asked for cooperation. The main objective of this paper is to gather the necessary knowledge from the end users of an Electronic Medical Record (EMR) regarding access control and, with their collaboration, define a list of usable access control rules and access control model, which are closer to user needs and workflows. Access control standards in healthcare were also analyzed. Afterwards, focus groups were applied to health professionals and several access control rules were extracted from the analysis of all the information that was gathered. The Break The Glass - Role Based Access Control model (BTG-RBAC) was created and includes the generated access control rules, which are closer to users' workflows and needs and can, therefore, improve EMR's usability while reducing some barriers for its effective integration.

Language: English

Type (Professor's evaluation): Scientific

No. of pages: 6