Accessibility navigation


A Knowledge-Constrained Role-Based Access Control model for protecting patient privacy in hospital information systems

Zhang, R., Chen, D., Shang, X., Zhu, X. and Liu, K. (2018) A Knowledge-Constrained Role-Based Access Control model for protecting patient privacy in hospital information systems. IEEE Journal of Biomedical and Health Informatics, 22 (3). pp. 904-911. ISSN 2168-2208

[img]
Preview
Text - Accepted Version
· Please see our End User Agreement before downloading.

1MB

It is advisable to refer to the publisher's version if you intend to cite from this work. See Guidance on citing.

To link to this item DOI: 10.1109/JBHI.2017.2696573

Abstract/Summary

Current access control mechanisms of the hospital information system can hardly identify the real access intention of system users. A relaxed access control increases the risk of compromise of patient privacy. To reduce unnecessary access of patient information by hospital staff, this paper proposes a Knowledge-Constrained Role-Based Access Control (KCRBAC)model in which a variety of medical domain knowledge is considered in access control. Based on the proposed Purpose Tree and knowledge-involved algorithms, the model can dynamically define the boundary of access to the patient information according to the context, which helps protect patient privacy by controlling access. Compared with the Role-Based Access Control model, KC-RBAC can effectively protectpatient information according to the results of the experiments.

Item Type:Article
Refereed:Yes
Divisions:Henley Business School > Business Informatics, Systems and Accounting
ID Code:76565
Publisher:IEEE

Downloads

Downloads per month over past year

University Staff: Request a correction | Centaur Editors: Update this record

Page navigation