Title:	AUTHORIZATION IN CLOUD E-PRESCRIBING SERVICES
Author(s):	Vassiliki Koufi, Flora Malamateniou, George Vassilacopoulos
ISBN:	978-972-8939-16-8
Editors:	Mário Macedo
Year:	2010
Edition:	Single
Keywords:	Cloud Computing, Personal Health Record, ePrescribing, healthcare process, authorization.
Type:	Short Paper
First Page:	219
Last Page:	224
Language:	English
Cover:
Full Contents:	click to dowload
Paper Abstract:	The confidentiality of healthcare information is extremely important in any healthcare system. This paper is concerned with the development of suitable authorization and access control framework for ePrescribing seen as a cloud computing service offered to healthcare professionals and patients alike. While ePrescribing is expected to improve many aspects of healthcare, these high expectations will be achieved only if provider organizations pay continuing attention to the features that would most improve patients’ safety and health and select systems that have such appropriate features, security being among the most prominent ones. In particular, although the ePrescribing workflow varies with the context, giving rise to specific ordering of task executions, it is authorization that determines who can execute the various workflow tasks and what information can be accessed during task executions. The main objective of this paper is to embed context-aware access control into ePrescribing workflows, operating in conjunction with a personal healthcare record (PHR) system which has been implemented in a cloud computing infrastructure. The proposed model enables authorization to be based not only on static rules and roles but also to be influenced by the workflow execution context ensuring precise and tight access control. The resultant security system has been incorporated into a prototype ePrescribing workflow to enable authorized access to patient information when and where needed.
	Go Back