Jove
Visualize
Contact Us
JoVE
x logofacebook logolinkedin logoyoutube logo
ABOUT JoVE
OverviewLeadershipBlogJoVE Help Center
AUTHORS
Publishing ProcessEditorial BoardScope & PoliciesPeer ReviewFAQSubmit
LIBRARIANS
TestimonialsSubscriptionsAccessResourcesLibrary Advisory BoardFAQ
RESEARCH
JoVE JournalMethods CollectionsJoVE Encyclopedia of ExperimentsArchive
EDUCATION
JoVE CoreJoVE BusinessJoVE Science EducationJoVE Lab ManualFaculty Resource CenterFaculty Site
Terms & Conditions of Use
Privacy Policy
Policies

Related Experiment Videos

Authorisation and access control for electronic health record systems.

Bernd Blobel1

  • 1Faculty of Medicine, Institute of Biometrics and Medical Informatics, Otto-von-Guericke University Magdeburg, Leipziger Street 44, D-39120 Magdeburg, Germany. bernd.blobel@mrz.uni-magdeburg.de

International Journal of Medical Informatics
|April 7, 2004
PubMed
Summary

Electronic health record (EHR) systems require robust authorization models for secure inter-organizational data sharing. New models separate structural and functional roles, enhancing access control in complex health networks.

Related Concept Videos

You might also read

Related Articles

Articles linked to this work by shared authors, journal, and citation graph.

Sort by
Same author

OnTEPT: a multimodal OWL ontology for post-traumatic stress disorder.

Journal of biomedical semantics·2026
Same author

A System Model and Requirements for Transformation to Human-Centric Digital Health.

Journal of medical Internet research·2025
Same author

The Representational Challenge of Integration and Interoperability in Transformed Health Ecosystems.

Journal of personalized medicine·2025
Same author

Selected Papers from the pHealth 2022 Conference, Oslo, Norway, 8-10 November 2022.

Journal of personalized medicine·2024
Same author

Transforming Ontology Web Language Elements into Common Terminology Service 2 Terminology Resources.

Journal of personalized medicine·2024
Same author

The Representational Challenge for Designing and Managing 5P Medicine Ecosystems.

Studies in health technology and informatics·2024

Area of Science:

  • Health Informatics
  • Computer Science
  • Information Security

Background:

  • Electronic health record (EHR) systems are central to modern healthcare, enabling shared care and interoperability.
  • Existing authorization models are insufficient for complex, inter-organizational health networks.
  • International standards like CEN ENV 13606 and HL7 guide EHR architecture and security.

Purpose of the Study:

  • To develop novel models and methods for structured policy definition, authorization, and access control in EHR systems.
  • To address the limitations of user-level authorization in extended health networks.
  • To ensure secure and efficient data sharing across different healthcare organizations.

Main Methods:

  • Developed a component-oriented, model-based architecture for EHR systems.

Related Experiment Videos

  • Introduced a conceptual separation of structural roles (organizational relationships) and functional roles (activities, rights, duties).
  • Utilized Unified Modeling Language (UML) and Extensible Markup Language (XML) for implementation and demonstration.

    • Main Results:

    • Successfully implemented models for health-specific and EHR-related roles, authorization management, and access control.
    • Demonstrated practical application in analysis, design, implementation, and maintenance of policy and authorization management.
    • Established a framework for aggregating organizational, functional, informational, and technological components based on specific rules.

    Conclusions:

    • The proposed role-based models enhance EHR security and interoperability in shared care environments.
    • Separating structural and functional roles provides a flexible and scalable approach to authorization management.
    • The implemented methods support secure and effective policy definition and access control in distributed health networks.