Review of hierarchical database access control for E-medicine systems

Area of Science:

• Computer Science
• Information Security
• Health Informatics

Background:

• Hierarchical access control schemes facilitate efficient secret key management for users with hierarchical relationships.
• Existing schemes in e-medicine systems, particularly those addressing Health Insurance Portability and Accountability Act (HIPAA) regulations, face challenges.
• These challenges include security vulnerabilities, substantial storage requirements, and heavy computational overhead.

Purpose of the Study:

• To review and discuss existing hierarchical access control schemes for medical record databases.
• To highlight the limitations of current schemes concerning security and efficiency.
• To inform the development of improved access control mechanisms for sensitive health data.

Main Methods:

• Literature review of key management schemes for hierarchical access control.
• Analysis of schemes in the context of e-medicine systems and privacy regulations (e.g., HIPAA).
• Comparative discussion of security, storage, and computational aspects of reviewed schemes.

Main Results:

• Identified significant security and efficiency drawbacks in current hierarchical access control schemes for medical data.
• Highlighted the inadequacy of existing solutions in meeting the demands of secure and efficient e-medicine systems.
• Emphasized the need for schemes that balance robust security with practical usability.

Conclusions:

• Current hierarchical access control schemes are insufficient for secure and efficient management of medical record databases.
• There is a critical need for novel schemes that enhance security and reduce computational/storage burdens.
• Future research should focus on developing advanced key management solutions compliant with privacy regulations for e-health applications.