Usable Access Control Policy and Model for Healthcare

• Tipo: Artigo em Livro de Atas de Conferência Internacional
• Data: 2011

Autores

ferreira, a (Autor) FMUP; correia, r (Autor) FMUP; brito, m (Autor) Outra; antunes, l (Autor) FCUP

Ata de Conferência Internacional

Título: 2011 24TH INTERNATIONAL SYMPOSIUM ON COMPUTER-BASED MEDICAL SYSTEMS (CBMS)

Páginas: 1-6

24th International Symposium on Computer-Based Medical Systems (CBMS)

Bristol, ENGLAND, JUN 27-30, 2011

Indexação

ISI Web of Knowledge - 2 Citações

Scopus - 14 Citações

Classificação Científica

FOS: Ciências exactas e naturais > Ciências da computação e da informação

Outras Informações

ID Authenticus: P-002-X68

DOI: 10.1109/CBMS.2011.5999035

Abstract (EN): Access control defines what users can perform within a system. It is usually defined by software engineers and end users are seldom asked for cooperation. The main objective of this paper is to gather the necessary knowledge from the end users of an Electronic Medical Record (EMR) regarding access control and, with their collaboration, define a list of usable access control rules and access control model, which are closer to user needs and workflows. Access control standards in healthcare were also analyzed. Afterwards, focus groups were applied to health professionals and several access control rules were extracted from the analysis of all the information that was gathered. The Break The Glass - Role Based Access Control model (BTG-RBAC) was created and includes the generated access control rules, which are closer to users' workflows and needs and can, therefore, improve EMR's usability while reducing some barriers for its effective integration.

Idioma: Inglês

Tipo (Avaliação Docente): Científica

Nº de páginas: 6