Framework and prototype for a secure XML-based electronic health records system. (9th April 2007)

• Record Type: Journal Article
• Authors: Steele, Robert; Gardner, William; Chandra, Darius; Dillon, Tharam S.
• Is Part Of: International journal of electronic healthcare. Volume 3:Number 2(2007)
• Page Start: 151
• Page End: 174
• Publication Date: 2007-04-09
• Subjects: electronic health records -- EHRs -- access control -- data confidentiality -- eXtensible markup language -- XML -- electronic healthcare -- e-health -- personal health records -- security measures -- auto-generate user interface -- web application -- semi-structured data -- medical information; Medical informatics -- Periodicals; 362.10285
• Languages: English
• ISSNs: 1741-8453

Abstract

Security of personal medical information has always been a challenge for the advancement of Electronic Health Records (EHRs) initiatives. eXtensible Markup Language (XML), is rapidly becoming the key standard for data representation and transportation. The widespread use of XML and the prospect of its use in the Electronic Health (e-health) domain highlights the need for flexible access control models for XML data and documents. This paper presents a declarative access control model for XML data repositories that utilises an expressive XML role control model. The operational semantics of this model are illustrated by Xplorer, a user interface generation engine which supports search-browse-navigate activities on XML repositories.