SGAC: a patient-centered access control method - Archive ouverte HAL
Communication Dans Un Congrès Année : 2016

SGAC: a patient-centered access control method

Résumé

This paper presents SGAC (\textit{Solution de Gestion Automatisée du Consentement, automatised consent management solution}), a new healthcare access control model and its support tool, that manages patient wishes regarding access to their electronic health record (EHR). The development of this model has been achieved in the scope of a project with the Sherbrooke University Hospital, and thus has been adapted to take into account laws and regulations applicable in Québec and Canada, as they set bounds to patient wishes: under strictly defined contexts, patient consent can be overridden to protect his/her life. Moreover, since patient wishes and laws can be in conflict, SGAC provides a mechanism to address this problem. Besides, laws do not cover all cases where consent should be overridden to ensure patient safety. To this end, we define a formal model of SGAC which allows for property verification, making it possible to detect these cases. A performance comparison with XACML (WSO2/Balana) is presented and demonstrates the superior performances of SGAC
Fichier non déposé

Dates et versions

hal-01359877 , version 1 (05-09-2016)

Identifiants

Citer

Nghi Huynh, Marc Frappier, Herman Pooda, Amel Mammar, Régine Laleau. SGAC: a patient-centered access control method. RCIS 2016 : 10th International Conference on Research Challenges in Information Science, Jun 2016, Grenoble, France. pp.1 - 12, ⟨10.1109/RCIS.2016.7549286⟩. ⟨hal-01359877⟩
112 Consultations
0 Téléchargements

Altmetric

Partager

More