Managing Break-The-Glass using Situation-oriented authorizations - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2014

Managing Break-The-Glass using Situation-oriented authorizations

Résumé

The patient's life is a redline in Healthcare environments. Whenever it comes to danger, such environments reject static authorizations . A common problem "Break The Glass" is known as the act of breaking the static authorization in order to reach the required permission. Healthcare environment is full of different contexts and situations that require the authorizations to be dynamic. Dynamic Authorization is a concept of giving the choice to E-Health authorization system to choose the most suitable permission by considering one's situation. This paper aims at preventing the matter of modifying the policy to make authorizations dynamic. It introduces a simple solution to provide Dynamic Authorization by orienting the authorization system decision using situations. Situations, which are calculated using Complex Event Processing, are integrated to XACML architecture. A Healthcare example proves the efficiency of our approach.
Fichier principal
Vignette du fichier
kabbani_13032.pdf (464.74 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01120112 , version 1 (24-02-2015)

Identifiants

  • HAL Id : hal-01120112 , version 1
  • OATAO : 13032

Citer

Bashar Kabbani, Romain Laborde, François Barrère, Abdelmalek Benzekri. Managing Break-The-Glass using Situation-oriented authorizations. 9ème Conférence sur la Sécurité des Architectures Réseaux et Systèmes d'Information - SAR-SSI 2014, May 2014, Saint-Germain-Au-Mont-d'Or (Lyon), France, France. pp.0. ⟨hal-01120112⟩
387 Consultations
118 Téléchargements

Partager

Gmail Mastodon Facebook X LinkedIn More