An access control model for cloud-based EMR federation. (9th February 2015)

• Record Type: Journal Article
• Authors: Nimkar, Anant V.; Ghosh, Soumya K.
• Is Part Of: International journal on trust management in computing and communications. Volume 2:Number 4(2014)
• Page Start: 330
• Page End: 352
• Publication Date: 2015-02-09
• Subjects: security -- access control model -- medical healthcare -- federation -- cloud -- electronic medical record -- EMR; Data protection -- Periodicals; Database management -- Periodicals; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.8
• Languages: English
• ISSNs: 2048-8378

Abstract

Pharmaceutical companies and researchers need a huge collection of health records for an epidemiological study where spread and control of diseases are investigated. Huge collection is not only the requirement in an epidemiological study, but the collection of health records must be from diverse geographical area to perform unbiased experimentation. This requirement is currently addressed through the health record exchange which results in delay and extra communication overhead because of per record negotiation. This paper presents a cloud-based architecture for the federation of entities from healthcare ecosystem and provides an economical and scalable solution. The paper also investigates the security issues on federated health records to maintain patients' privacy. It finally proposes EMR federation access control model (EMR-FACM) to authorise subjects over objects through the companion identity and label space model (ILSM) and federation services. The theoretical study attempts to prove the correctness of proposed EMR-FACM.