A posteriori access and usage control policy in healthcare environment - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Journal of information assurance and security (JIAS) Année : 2011

A posteriori access and usage control policy in healthcare environment

Résumé

Traditional access control mechanisms prevent illegal access by controlling access right before executing an action; they belong to a class of a priori security solutions and, from this point of view, they have some limitations, like inflexibility in unanticipated circumstances. By contrast, a posteriori mechanisms enforce policies not by preventing unauthorized access, but rather by deterring it. Such access control needs evidence to prove violations. Evidence is derived from log records, which trace each user's actions. Efficiency of violation detection mostly depends on the compliance of log records with the access and usage control policy. In order to develop an efficient method for finding these violations, we propose restructuring log records according to a security policy model. We illustrate our methodology by applying it to the healthcare domain, taking care of the Integrating the Healthcare Enterprise (IHE) framework, particularly its basic security profile, ATNA (Audit Trail and Node Authentication). This profile defines log records established on the analysis of common health practice scenarios. We analyze and establish how ATNA log records can be refined in order to be integrated into an \textit{a posteriori} access and usage control process, based on an expressive and contextual security policy like the OrBAC (Organization Based Access Control) policy.
Fichier non déposé

Dates et versions

hal-00640655 , version 1 (14-11-2011)

Identifiants

  • HAL Id : hal-00640655 , version 1

Citer

Hanieh Azkia, Nora Cuppens-Bouhlahia, Frédéric Cuppens, Gouenou Coatrieux. A posteriori access and usage control policy in healthcare environment. Journal of information assurance and security (JIAS), 2011, 6 (192), pp.389 - 397. ⟨hal-00640655⟩
82 Consultations
0 Téléchargements

Partager

Gmail Facebook X LinkedIn More