Personalized access control for a personally controlled health record

摘要: Access control is a key feature of healthcare systems. Up until recently most information systems have been local to facility and accessible only clinicians. Currently there move towards making health more patients. One example the Personally Controlled Health Record (PCHR) where patient in charge deciding who gets access information. In PCHR administrator control. While it certainly possible create roles representing people patients would want share with, like primary physician, also likely, desirable, afford high level freedom be able specialized policies tailored their personal wishes. We entitle this personalized paper we present semi-formal model for how believe may realized. The draws on combines properties concepts both Role-Based Control (RBAC) Discretionary (DAC) achieve desired properties. Throughout use as motivating explain our reasoning practical model.