SGAC: a patient-centered access control method

Abstract : This paper presents SGAC (\textit{Solution de Gestion Automatisée du Consentement, automatised consent management solution}), a new healthcare access control model and its support tool, that manages patient wishes regarding access to their electronic health record (EHR). The development of this model has been achieved in the scope of a project with the Sherbrooke University Hospital, and thus has been adapted to take into account laws and regulations applicable in Québec and Canada, as they set bounds to patient wishes: under strictly defined contexts, patient consent can be overridden to protect his/her life. Moreover, since patient wishes and laws can be in conflict, SGAC provides a mechanism to address this problem. Besides, laws do not cover all cases where consent should be overridden to ensure patient safety. To this end, we define a formal model of SGAC which allows for property verification, making it possible to detect these cases. A performance comparison with XACML (WSO2/Balana) is presented and demonstrates the superior performances of SGAC
Type de document :
Communication dans un congrès
RCIS 2016 : 10th International Conference on Research Challenges in Information Science, Jun 2016, Grenoble, France. IEEE Computer Society, Proceedings RCIS 2016 : 10th International Conference on Research Challenges in Information Science, pp.1 - 12, 2016, <10.1109/RCIS.2016.7549286>
Liste complète des métadonnées

https://hal.archives-ouvertes.fr/hal-01359877
Contributeur : Médiathèque Télécom Sudparis & Télécom Ecole de Management <>
Soumis le : lundi 5 septembre 2016 - 10:17:20
Dernière modification le : samedi 18 février 2017 - 01:10:40

Identifiants

Citation

Nghi Huynh, Marc Frappier, Herman Pooda, Amel Mammar, Régine Laleau. SGAC: a patient-centered access control method. RCIS 2016 : 10th International Conference on Research Challenges in Information Science, Jun 2016, Grenoble, France. IEEE Computer Society, Proceedings RCIS 2016 : 10th International Conference on Research Challenges in Information Science, pp.1 - 12, 2016, <10.1109/RCIS.2016.7549286>. <hal-01359877>

Partager

Métriques

Consultations de la notice

71