Access control for healthcare data using extended XACML-SRBAC model

El-Aziz, A. A. Abd; Kannan, A.

doi:10.1109/iccci.2012.6158775

Cited by 9 publications

(5 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It can also be used to express an architecture and a processing model that describes how to evaluate access requests according to the rules prede ned in access polices. XACML is designed to be suitable for a variety of application environments, such as social networks [8], home automation gateways [25], healthcare domain [10,37,44], distributed systems [31], etc. ALFA.…”

Section: Representing Access Control Policiesmentioning

confidence: 99%

A Flexible Authorization Architecture for Systems of Interoperable Medical Devices

Tasali

Chowdhury

Vasserman

2017

Proceedings of the 22nd ACM on Symposium on Access Control Models and Technologies

View full text Add to dashboard Cite

Robust authentication and authorization are vital to next-generation distributed medical systems-the Medical Internet of ings (MIoT). However, there is yet no good authorization model for real-time multi-channel data from systems of heterogeneous devices providing multiple physiological parameters for clinicians who may change on a minute-by-minute basis. We present a exible authorization architecture for interoperable medical systems, and an implementation and evaluation in the context of the Medical Device Coordination Framework (MDCF) high-assurance middleware. Our framework is based on the well-studied A ributed Based Access Control model, but we introduce a new method of a ribute inheritance that provides more ne-grained access control, supporting multiple di erent authorization levels for multiple physiological data channels from the same device, and rich and expressive policy speci cation which facilitates plug-and-play connectivity of devices-most do not require pre-speci cation of individual permissions. Our architecture is standards-compliant and modular, using the eXtensible Access Control Markup Language (XACML), and Axiomatics Language for Authorization (ALFA) for policy speci cation, and standalone authorization modules which can be integrated with other platforms such as OpenICE. We stress-test our implementation in a realistic distributed system con guration, and show that the unoptimized system introduces negligible network and storage overhead, and minimal memory and CPU overhead. CCS CONCEPTS •Security and privacy →Access control; Authorization; •Applied computing →Health care information systems; •Computer systems organization →Embedded and cyber-physical systems;

show abstract

Section: Representing Access Control Policiesmentioning

confidence: 99%

A Flexible Authorization Architecture for Systems of Interoperable Medical Devices

Tasali

Chowdhury

Vasserman

2017

Proceedings of the 22nd ACM on Symposium on Access Control Models and Technologies

View full text Add to dashboard Cite

show abstract

“…In [8] the authors also utilize XACML but focus on the privacy of e-Health data within the mobile environment. In contrast to the work presented here, a complete framework is not included and, moreover, the authors choose computationally intensive security mechanisms such as XML encryption digital signatures.…”

Section: Background and Related Workmentioning

confidence: 99%

Secure and Authenticated Access to LLN Resources Through Policy Constraints

Rantos

Fysarakis

Soultatos

et al. 2015

Information Security Theory and Practice

View full text Add to dashboard Cite

Abstract. Ubiquitous devices comprising several resource-constrained sensors and actuators while having the long desired Internet connectivity, are becoming part of many solutions that seek to enhance user's environment smartness and quality of living. Their intrinsic resource limitations however constitute critical requirements, such as security, a great challenge. When these nodes are associated with applications that might have an impact in user's privacy or even become life threatening, the security issues are of primary concern. Access to these resources should be appropriately controlled to ensure that such wearable nodes are adequately protected. On the other hand, it is very important to not restrict access to only a very closed group of entities. This work presents a service oriented architecture that utilizes policy-based, unified, cross-platform and flexible access control to allow authenticated entities consume the services provided by wearable nodes while protecting their valuable resources.

show abstract

“…In [11] the authors also utilize XACML but focus on the privacy of e-Health data within the mobile environment. In contrast to the work presented here, a complete framework is not included and, moreover, the authors choose computationally intensive security mechanisms such as XML encryption digital signatures.…”

Section: Related Workmentioning

confidence: 99%

Policy-Based Access Control for Body Sensor Networks

Manifavas

Fysarakis

Rantos

et al. 2014

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Sensor nodes and actuators are becoming ubiquitous and research efforts focus on addressing the various issues stemming from resources constraints and other intrinsic characteristics typically associated with such devices and their applications. In the case of wearable nodes, and especially in the context of e-Health applications, the security issues are exacerbated by the direct interaction with the human body and the associated safety and privacy concerns. This work presents a policy-based, unified, cross-platform and flexible access control framework. It adopts a web services-compliant approach to enable secure and authorized fine-grained access control to body sensor network resources and services. The proposed scheme specifically considers the very limited resources of so-called nano nodes that are anticipated to be used in such an environment. A proof-of-concept implementation is developed and a preliminary performance evaluation is presented.

show abstract

Access control for healthcare data using extended XACML-SRBAC model

Cited by 9 publications

References 6 publications

A Flexible Authorization Architecture for Systems of Interoperable Medical Devices

A Flexible Authorization Architecture for Systems of Interoperable Medical Devices

Secure and Authenticated Access to LLN Resources Through Policy Constraints

Policy-Based Access Control for Body Sensor Networks

Contact Info

Product

Resources

About