DOrMac: Privacy-aware Organization Based Access Control Model

dc.contributor.authorMekanne, Salem
dc.date.accessioned2015-11-23T07:40:11Z
dc.date.available2015-11-23T07:40:11Z
dc.date.issued2015-11-22
dc.description.abstract— SIMPLE FAILURES IN PROTECTING MEDICAL DATA CAN HAVE DRAMATIC CONSEQUENCES ON A PATIENT PRIVACY. IN THIS ARTICLE, WE FOCUS MAINLY ON ACCESS CONTROL FOR PROTECTING SENSITIVE DATA WITHIN PATIENT’S ELECTRONIC HEALTH RECORD (EHR). WE PROPOSE A NEW ACCESS CONTROL MODEL CALLED DORMAC CAPABLE OF EXPRESSING BOTH A SECURITY POLICY ESTABLISHED BY A HEALTHCARE PROVIDER AND A PRIVACY POLICY DEFINED BY A PATIENT. FOR EXPRESSING PRIVACY, WE ENRICHED THE ORGANIZATION BASED ACCESS CONTROL MODEL (ORBAC) BY SOME SECURITY CONCEPTS INSPIRED FROM DISCRETIONARY AND MANDATORY POLICIES. THIS MODEL ACHIEVE A GOOD BALANCE BETWEEN AVAILABILITY OF DATA DURING CARE AND PRIVACY PROTECTION.fr_FR
dc.identifier.isrncerist-dsism/RR-15-000000034--dzfr_FR
dc.identifier.urihttp://dl.cerist.dz/handle/CERIST/779
dc.publisherCERIST
dc.relation.ispartofRapports de recherche internes
dc.relation.placeAlger
dc.structureSystèmes d'Information et Image en Santé S2ISfr_FR
dc.subjectSecurity, Privacy, Access Control, Electronic Health Record, DOrMac.fr_FR
dc.titleDOrMac: Privacy-aware Organization Based Access Control Modelfr_FR
dc.typeTechnical Report
Files
Collections