Integrating Patient Consent in e-Health Access Control

Integrating Patient Consent in e-Health Access Control

Kim Wuyts, Riccardo Scandariato, Griet Verhenneman, Wouter Joosen
Copyright: © 2011 |Pages: 24
DOI: 10.4018/jsse.2011040101
OnDemand:
(Individual Articles)
Available
$37.50
Current Special Offers
No Current Special Offers
TOTAL SAVINGS: $37.50

Abstract

Many initiatives exist that integrate e-health systems on a large scale. One of the main technical challenges is access control, although several frameworks and solutions, like XACML, are becoming standard practice. Data is no longer shared within one affinity domain but becomes ubiquitous, which results in a loss of control. As patients will be less willing to participate without additional control strategies, patient consents are introduced that allow the patients to determine precise access rules on their medical data. This paper explores the consequences of integrating consent in e-health access control. First, consent requirements are examined, after which an architecture is proposed which incorporates patient consent in the access control service of an e-health system. To validate the proposed concepts, a proof-of-concept implementation is built and evaluated.
Article Preview
Top

Sharing patient data on a large scale has a big impact on the patient’s privacy. Therefore, it is important that the patients themselves are also given the ability to determine rules concerning the access rights of their own data. This section is divided in a conceptual part and a more technical part. The first part provides an introduction to basic consent concepts and motivates the importance of patient consents. The second part derives from the legal analysis technical constraints for the format of a consent and its management (storage, access, etc.).

Complete Article List

Search this Journal:
Reset
Open Access Articles: Forthcoming
Volume 8: 4 Issues (2017)
Volume 7: 4 Issues (2016)
Volume 6: 4 Issues (2015)
Volume 5: 4 Issues (2014)
Volume 4: 4 Issues (2013)
Volume 3: 4 Issues (2012)
Volume 2: 4 Issues (2011)
Volume 1: 4 Issues (2010)
View Complete Journal Contents Listing