HAL will be down for maintenance from Friday, June 10 at 4pm through Monday, June 13 at 9am. More information
Skip to Main content Skip to Navigation
Conference papers

SGAC: a patient-centered access control method

Abstract : This paper presents SGAC (\textit{Solution de Gestion Automatisée du Consentement, automatised consent management solution}), a new healthcare access control model and its support tool, that manages patient wishes regarding access to their electronic health record (EHR). The development of this model has been achieved in the scope of a project with the Sherbrooke University Hospital, and thus has been adapted to take into account laws and regulations applicable in Québec and Canada, as they set bounds to patient wishes: under strictly defined contexts, patient consent can be overridden to protect his/her life. Moreover, since patient wishes and laws can be in conflict, SGAC provides a mechanism to address this problem. Besides, laws do not cover all cases where consent should be overridden to ensure patient safety. To this end, we define a formal model of SGAC which allows for property verification, making it possible to detect these cases. A performance comparison with XACML (WSO2/Balana) is presented and demonstrates the superior performances of SGAC
Document type :
Conference papers
Complete list of metadata

Contributor : Médiathèque Télécom Sudparis & Institut Mines-Télécom Business School Connect in order to contact the contributor
Submitted on : Monday, September 5, 2016 - 10:17:20 AM
Last modification on : Wednesday, November 3, 2021 - 9:22:33 AM



Nghi Huynh, Marc Frappier, Herman Pooda, Amel Mammar, Régine Laleau. SGAC: a patient-centered access control method. RCIS 2016 : 10th International Conference on Research Challenges in Information Science, Jun 2016, Grenoble, France. pp.1 - 12, ⟨10.1109/RCIS.2016.7549286⟩. ⟨hal-01359877⟩



Record views