Jove
Visualize
Contact Us
JoVE
x logofacebook logolinkedin logoyoutube logo
ABOUT JoVE
OverviewLeadershipBlogJoVE Help Center
AUTHORS
Publishing ProcessEditorial BoardScope & PoliciesPeer ReviewFAQSubmit
LIBRARIANS
TestimonialsSubscriptionsAccessResourcesLibrary Advisory BoardFAQ
RESEARCH
JoVE JournalMethods CollectionsJoVE Encyclopedia of ExperimentsArchive
EDUCATION
JoVE CoreJoVE BusinessJoVE Science EducationJoVE Lab ManualFaculty Resource CenterFaculty Site
Terms & Conditions of Use
Privacy Policy
Policies

Related Experiment Videos

A contextual role-based access control authorization model for electronic patient record.

Gustavo H M B Motta1, Sergio S Furuie

  • 1Department of Informatics, Federal University of Paraiba, João Pessoa PB 58059-900, Brazil. gustavo.motta@incor.usp.br

IEEE Transactions on Information Technology in Biomedicine : a Publication of the IEEE Engineering in Medicine and Biology Society
|October 2, 2003
PubMed
Summary

This study introduces a contextual role-based access control model for electronic patient records (EPR). It enhances patient privacy and data confidentiality through flexible, context-aware authorization for secure EPR systems.

Related Concept Videos

You might also read

Related Articles

Articles linked to this work by shared authors, journal, and citation graph.

Sort by
Same author

Time of Flight Transmission Mode Ultrasound Computed Tomography With Expected Gradient and Boundary Optimization.

IEEE transactions on bio-medical engineering·2025
Same author

Objective color calibration for manufacturing facial prostheses.

Journal of biomedical optics·2021
Same author

Towards an Information Infrastructure for Medical Image Sharing.

Journal of digital imaging·2019
Same author

Guidewire path determination for intravascular applications.

Computer methods in biomechanics and biomedical engineering·2015
Same author

Compression of high-density EMG signals for trapezius and gastrocnemius muscles.

Biomedical engineering online·2014
Same author

Edge-preserving speckle texture removal by interference-based speckle filtering followed by anisotropic diffusion.

Ultrasound in medicine & biology·2012

Area of Science:

  • Health Informatics
  • Computer Science
  • Information Security

Background:

  • Effective authorization and access control are critical for widespread electronic patient record (EPR) adoption in healthcare.
  • Existing models may lack the flexibility to balance patient privacy with necessary access.

Purpose of the Study:

  • To propose a novel contextual role-based access control (CRBAC) authorization model for EPR systems.
  • To enhance patient privacy and data confidentiality while maintaining system flexibility.

Main Methods:

  • Developed a CRBAC model integrating organizational roles, role hierarchies, and inheritance.
  • Incorporated positive/negative authorizations and static/dynamic separation of duties.
  • Utilized contextual information (e.g., user-patient relationship) for real-time access decisions.

Related Experiment Videos

Main Results:

  • The proposed model regulates user access to EPR based on organizational roles and contextual factors.
  • It supports complex authorization rules, including role conflicts and inheritance.
  • Contextual authorizations enable more precise and flexible access policies.

Conclusions:

  • The CRBAC model offers a robust solution for secure EPR access control.
  • It significantly improves patient privacy and data confidentiality in healthcare settings.
  • The model provides a flexible framework adaptable to specific healthcare organizational needs.