OASIS role-based access control for electronic health records

Keywords

Scalability, Health records, Access control, Control (management), Service (business)

References

• Cassandra: flexible trust management, applied to electronic health recordsM.Y. Becker, Peter Sewell — 2004
• Secure Computer System: Unified Exposition and Multics InterpretationDavid E. Bell, L.J. La Padula — 1976
• Access control: principle and practiceRavi Sandhu, Pierangela Samarati — 1994
• A model of OASIS role-based access control and its support for active securityJean Bacon, Ken Moody, Walt Yao — 2001
• Role-Based Security in Data Base Management SystemsFrederick H. Lochovsky, Carson Woo — 1988
• A model of accountability, confidentiality and override for healthcare and other applicationsJim Longstaff, Mike Lockyer, Michael Thick — 2000
• A scenario-driven role engineering process for functional RBAC rolesGustaf Neumann, Mark Strembeck — 2002
• The PERMIS X.509 role based privilege management infrastructureDavid Chadwick, Alexander Otenko — 2002
• The tees confidentiality model: an authorisation model for identities and rolesJim Longstaff, Mike Lockyer, John B. Nicholas — 2003
• A Comment on the 'Basic Security Theorem' of Bell and LaPadulaJohn McLean — 1985
• Role mining - revealing business roles for security administration using data mining technologyMartin K. Kuhlmann, Dalia Shohat, Gerhard Schimpf — 2003
• An open architecture for secure interworking servicesRichard Hayton, Ken Moody — 1996
• The NIST model for role-based access control: towards a unified standardRavi Sandhu, David Ferraiolo, Richard Kühn — 2000
• Federated healthcare record server - the Synapses paradigmWilliam Grimson, Damon Berry, Jane Grimson — 1998
• The role graph model and conflict of interestMatunda Nyanchama, Sylvia L. Osborn — 1999
• Policy based electronic transmission of prescriptionsDavid Chadwick, Darren Mundy — 2003
• Separation of duty in role-based environmentsRichard T. Simon, Mary Ellen Zurko — 1997
• Cassandra: distributed access control policies with tunable expressivenessM.Y. Becker, Peter Sewell — 2004
• The role-based access control system of a European bank: a case study and discussionAndreas Schaad, Jonathan Moffett, Jeremy Jacob — 2001
• Access control and trust in the use of widely distributed servicesJean Bacon, Ken Moody, Walt Yao — 2001

Cited by

• Role-based and time-bound access and management of EHR dataRui Zhang, Ling Liu, Rui Xue — 2014
• An integrated framework for securing semi-structured health recordsFlora Amato, Giuseppe De Pietro, Massimo Esposito — 2015
• A semantic approach for fine-grain access control of e-health documentsFlora Amato, Valentina Casola, Nicola Mazzocca — 2013
• Evaluating access control of open source electronic health record systemsEric Helms, Laurie Williams — 2011
• A Model for the Governance of Federated Healthcare Information SystemsNaftaly H. Minsky — 2010
• Patient-centric authorization framework for sharing electronic health recordsJing Jin, Gail‐Joon Ahn, Hongxin Hu — 2009
• COASTmed: software architectures for delivering customizable, policy-based differential web servicesAlegria Baquero — 2014
• Ubiquitous wireless telemedicineHabib F. Rashvand, Vicente Traver, E. Monton Sanchez — 2008
• eHCBAC: Flexible Column Based Access Control for Electronic Healthcare SystemsMei Liu, Ge Fu, Jiwu Jing — 2011
• Diversity-Multiplexing Tradeoff Analysis of Wireless Multiple-Antenna Cooperative Systems in General Fading ChannelsKun Xu — 2012
• An Enhanced Role-Based Access Control Mechanism for Hospital Information SystemsChenguang He, Cun-Zhang Cao, Shu‐Di Bao — 2011
• Patient-centric authorization framework for electronic healthcare servicesJing Jin, Gail‐Joon Ahn, Hongxin Hu — 2011
• A System for Semantic-Based Access ControlFlora Amato, Nicola Mazzocca, Giuseppe De Pietro — 2013
• Oriented collagen nanocoatings for tissue engineering.Laura Pastorino, Elena Dellacasa, Silvia Scaglione — 2014
• MeD-Lights: a usable metaphor for patient controlled access to electronic health recordsEmily K. Adams, Mehool Intwala, Apu Kapadia — 2010
• Compile-Time Enforcement of Dynamic Security PoliciesDavid Eyers, Sriram Srinivasan, Ken Moody — 2008
• An approach to modular and testable security models of real-world health-care applicationsAchim D. Brucker, Lukas Brügger, Paul Kearney — 2011
• Dynamic trust domains for secure, private, technology-assisted livingJatinder Singh, Jean Bacon, Ken Moody — 2007
• Security in Multi-domain Event-based SystemsSicherheit in ereignis-basierten MehrdomänensystemenJean Bacon, David Eyers, Jatinder Singh — 2009
• A Semantic-based Document Processing Framework: A Security PerspectiveFlora Amato, Valentina Casola, Nicola Mazzocca — 2011

Related papers

• A Dynamic Scalable Asynchronous Message Model Based on Distributed ObjectsZhang Xiao — 2002
• Scalable Database Management in Cloud ComputingPankaj Deep Kaur, Gitanjali Sharma — 2015
• Achieving security scalability and flexibility using Fog-Based Context-Aware Access ControlA. S. M. Kayes, Wenny Rahayu, Paul Watters — 2020
• Patient-centric authorization framework for sharing electronic health recordsJing Jin, Gail‐Joon Ahn, Hongxin Hu — 2009
• Scaling Blockchains to Support Electronic Health Record Systems for HospitalsAlyssa Donawa, Inema Orukari, Corey E. Baker — 2020
• An Initial Model and a Discussion of Access Control in Patient Controlled Health RecordsLillian Røstad — 2008
• Audit-Based Access Control for Electronic Health RecordsM.A.C. Dekker, Sandro Etalle — 2006
• Understanding Attribute-based Access Control for Modelling and Analysing Healthcare Professionals’ Security PracticesLivinus Obiora Nweke, Prosper Kandabongee Yeng, D. Stephen — 2020
• Envisioning secure and usable access control for patientsAna Ferreira, Gabriele Lenzini, Cátia Santos-Pereira — 2014