Privacy-Preserving Attribute-Based Access Control Model for XML-Based Electronic Health Record System

Seol, Kwangsoo; Kim, Young-Gab; Lee, Euijong; Seo, Young-Duk; Baik, Doo-Kwon

doi:10.1109/access.2018.2800288

Cited by 97 publications

(47 citation statements)

References 40 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The approach presented is able to protect EHR from insider attacks as EHR can only be view by those that are able to supply the appropriate attributes. Seol et al in [25] present a cloud-based EHR model that performs ABAC using XACML. The combination of XML encryption and XML digital signatures are used as security and privacy preserving technique.…”

Section: B Application Of Abac In Electronic Health Record (Ehr)mentioning

confidence: 99%

See 1 more Smart Citation

Understanding Attribute-based Access Control for Modelling and Analysing Healthcare Professionals’ Security Practices

Nweke¹,

Yeng²,

Wolthusen³

et al. 2020

IJACSA

View full text Add to dashboard Cite

In recent years, there has been an increase in the application of attribute-based access control (ABAC) in electronic health (e-health) systems. E-health systems are used to store a patient's electronic version of medical records. These records are usually classified according to their usage i.e., electronic health record (EHR) and personal health record (PHR). EHRs are electronic medical records held by the healthcare providers, while PHRs are electronic medical records held by the patients themselves. Both EHRs and PHRs are critical assets that require access control mechanism to regulate the manner in which they are accessed. ABAC has demonstrated to be an efficient and effective approach for providing fine grained access control to these critical assets. In this paper, we conduct a survey of the existing literature on the application of ABAC in e-health systems to understand the suitability of ABAC for e-health systems and the possibility of using ABAC access logs for observing, modelling and analysing security practices of healthcare professionals. We categorize the existing works according to the application of ABAC in PHR and EHR. We then present a discussion on the lessons learned and outline future challenges. This can serve as a basis for selecting and further advancing the use of ABAC in e-health systems.

show abstract

Section: B Application Of Abac In Electronic Health Record (Ehr)mentioning

confidence: 99%

“…The authors utilize XAMCL for providing fine-grained authorization and access to FHIR resources. Seol et al in [25] employ XACML with XML encryption and XML digital signatures as additional measure for ensuring that the privacy and security of EHR are preserved.…”

Section: A Comparison Of the Different Approachesmentioning

confidence: 99%

Understanding Attribute-based Access Control for Modelling and Analysing Healthcare Professionals’ Security Practices

Nweke¹,

Yeng²,

Wolthusen³

et al. 2020

IJACSA

View full text Add to dashboard Cite

show abstract

“…Attribute-Based Access Control (ABAC), also known as Policy Based Access Control (PBAC) refers to defining access policies and authorizing access to resources and data based on certain attributes defined by the organizations [26,27]. Attributes can vary from organization to organization.…”

Section: Attribute-based Access Controlmentioning

confidence: 99%

Security framework for cloud based electronic health record (EHR) system

Ganiga¹,

Pai²,

Pai³

et al. 2020

IJECE

View full text Add to dashboard Cite

Health records are an integral aspect of any Hospital Management System. With newer innovations in technology, there has been a shift in the way of recording health information. Medical records which used to be managed using various paper charts have now become easier to organize and maintain, thereby increasing the efficiency of medical staff. The Electronic Health Records (EHR) System is becoming a high-tech medical management technology developed for the economic or emerging economic countries like India. In a national health system, the EHR integrates the Electronic Medical Records (EMR) in all collaborating hospitals through different networks. EHR gives healthcare professionals a way to share and manage patient data quickly and effectively. Due to the mass storage of confidential patient data, healthcare organizations are considered as one of the most targeted sectors by intruders. This paper proposes a security framework for EHR system, which takes into consideration the integrity, availability, and confidentiality of health records. The threats posed to the EHR system are modeled by STRIDE modeling tool, and the amount of risk is calculated using DREAD. The paper also suggests the security mechanism and countermeasures based on security standards, which can be utilized in an EHR environment. The paper shows that the utilization of the proposed methods effectively addresses security concerns such as breach of sensitive medical information.

show abstract

“…The XML signature processing method originates from the XMLDSIG specification, but different authors [3], [7], [32], [33], [41], [46]- [49] differently emphasize the actions that would be performed.…”

Section: Related Workmentioning

confidence: 99%

New XML Signature Scheme That is Resistant to Some Attacks

Wawrzyniak

Fray

2020

IEEE Access

View full text Add to dashboard Cite

Supporting the execution of transactions through the use of electronic documents requires security. The scope of this security primarily involves ensuring the integrity, authenticity and non-repudiation of the origin of information. The signed XML document is a powerful tool that ensures the above features and the ease of processing and integration with various systems. An XML document may have many signatures, and each of them may sign different parts of the document. This feature is highly attractive, but in order to use it, the signature and structure of the document must be carefully designed. This article presents the existing risks associated with the use of XML signatures, focusing on XML signature wrapping vulnerability. This vulnerability is a consequence of the relationship between the XML signature and the signed document. The authors suggest that without neglecting the need for protection against the possibility of moving and replacing a fragment of the document, the use of secure XML signature references should also be considered and applied. The article proposes the use of secure signature templates as a countermeasure against the threat of an improper indication of the signed content defined in the signature reference. This threat is serious in automatic signature processing, where it is important to correctly indicate the signed content.

show abstract

Privacy-Preserving Attribute-Based Access Control Model for XML-Based Electronic Health Record System

Cited by 97 publications

References 40 publications

Understanding Attribute-based Access Control for Modelling and Analysing Healthcare Professionals’ Security Practices

Understanding Attribute-based Access Control for Modelling and Analysing Healthcare Professionals’ Security Practices

Security framework for cloud based electronic health record (EHR) system

New XML Signature Scheme That is Resistant to Some Attacks

Contact Info

Product

Resources

About