Privilege management and access control in Shared Care IS and EHR

Area of Science:

• Health Informatics
• Information Security
• Computer Science

Background:

• Shared care models necessitate secure distributed health information systems.
• Existing systems face challenges in maintaining advanced security and privacy.
• Public Key Infrastructure (PKI) is crucial for secure health data exchange.

Purpose of the Study:

• To address security and privacy challenges in distributed health information systems for shared care.
• To present current drafts of ISO and CEN standards for privilege management and access control.
• To highlight essential application security services for secure healthcare.

Main Methods:

• Review of Public Key Infrastructure (PKI) principles for healthcare.
• Analysis of authentication, authorization, and access control mechanisms.
• Examination of role concepts and security object classification schemes.
• Evaluation of current ISO and CEN standards drafts on privilege management and access control.

Main Results:

• PKI provides a framework for advanced security and privacy in shared care.
• Strong authentication and authorization are vital for secure health information systems.
• Role concepts and security object classification enhance access control.
• ISO and CEN standards are evolving to support privilege management and access control.

Conclusions:

• Implementing PKI is essential for realizing secure shared care concepts.
• Adherence to emerging ISO and CEN standards will strengthen healthcare security.
• A multi-faceted approach combining authentication, authorization, and access control is necessary.