A Knowledge-Constrained Role-Based Access Control model for protecting patient privacy in hospital information systems

Zhang, R., Chen, D., Shang, X., Zhu, X. and Liu, K. (2018) A Knowledge-Constrained Role-Based Access Control model for protecting patient privacy in hospital information systems. IEEE Journal of Biomedical and Health Informatics, 22 (3). pp. 904-911. ISSN 2168-2208 doi: 10.1109/JBHI.2017.2696573

Abstract/Summary

Current access control mechanisms of the hospital information system can hardly identify the real access intention of system users. A relaxed access control increases the risk of compromise of patient privacy. To reduce unnecessary access of patient information by hospital staff, this paper proposes a Knowledge-Constrained Role-Based Access Control (KCRBAC)model in which a variety of medical domain knowledge is considered in access control. Based on the proposed Purpose Tree and knowledge-involved algorithms, the model can dynamically define the boundary of access to the patient information according to the context, which helps protect patient privacy by controlling access. Compared with the Role-Based Access Control model, KC-RBAC can effectively protectpatient information according to the results of the experiments.

Item Type	Article
URI	https://reading-clone.eprints-hosting.org/id/eprint/76565
Identification Number/DOI	10.1109/JBHI.2017.2696573
Refereed	Yes
Divisions	Henley Business School > Digitalisation, Marketing and Entrepreneurship
Publisher	IEEE
Download/View statistics	View download statistics for this item