TY - GEN
T1 - An activity theory approach to specification of access control policies in transitive health workflows
AU - Valecha, Rohit
AU - Kashyap, Mandvika
AU - Rajeev, Swathi
AU - Rao, H. Raghav
AU - Upadhyaya, Shambhu
PY - 2014
Y1 - 2014
N2 - Access control models are implemented to mitigate the risks of unauthorized access in Electronic Health Records (EHRs). These models provide authorization with the help of security policies, wherein the protected resource is governed by one or more policies that exactly specify what attributes a requester needs to fulfill in order to obtain access. However, due to the increasing complexity of current healthcare system, defining and implementing policies are becoming more and more difficult. In this research-in-progress paper, we present an Activity Theory driven methodology to formalize access control policies that can be used in enforcing patient's privacy consent in a healthcare setting. In order to account for the transitivity in health workflows, we extend the Activity Theory to include "organizational interconnectedness" within the health workflows.
AB - Access control models are implemented to mitigate the risks of unauthorized access in Electronic Health Records (EHRs). These models provide authorization with the help of security policies, wherein the protected resource is governed by one or more policies that exactly specify what attributes a requester needs to fulfill in order to obtain access. However, due to the increasing complexity of current healthcare system, defining and implementing policies are becoming more and more difficult. In this research-in-progress paper, we present an Activity Theory driven methodology to formalize access control policies that can be used in enforcing patient's privacy consent in a healthcare setting. In order to account for the transitivity in health workflows, we extend the Activity Theory to include "organizational interconnectedness" within the health workflows.
KW - Access control policy
KW - Activity theory
KW - Electronic healthcare records
KW - Organizational interconnectedness
KW - Policy formalization
KW - Policy specification
KW - Transitive health workflows
KW - XACML policies
UR - https://www.scopus.com/pages/publications/85107712925
M3 - Conference contribution
AN - SCOPUS:85107712925
SN - 9781634396943
T3 - 35th International Conference on Information Systems "Building a Better World Through Information Systems", ICIS 2014
BT - 35th International Conference on Information Systems "Building a Better World Through Information Systems", ICIS 2014
PB - Association for Information Systems
T2 - 35th International Conference on Information Systems: Building a Better World Through Information Systems, ICIS 2014
Y2 - 14 December 2014 through 17 December 2014
ER -