AUTHORIZATION IN CLOUD E-RADIOLOGY SERVICES

Vassiliki Koufi, Flora Malamateniou, George Vassilacopoulos

2010

Abstract

The confidentiality of healthcare information is extremely important in any healthcare system. This paper is concerned with the development of suitable authorization and access control framework for eRadiology seen as a cloud computing service offered to healthcare professionals and patients alike. While eRadiology is expected to improve many aspects of healthcare, these high expectations will be achieved only if provider organizations pay continuing attention to the features that would most improve patients’ safety and health and select systems that have such appropriate features, security being among the most prominent ones. In particular, although the eRadiology workflow varies with the context, giving rise to specific ordering of task executions, it is authorization that determines who can execute the various workflow tasks and what information can be accessed during task executions. The main objective of this paper is to embed context-aware access control into eRadiology workflows, operating in conjunction with a personal healthcare record (PHR) system which has been implemented in a cloud computing infrastructure. The proposed model enables authorization to be based not only on static rules and roles but also to be influenced by the workflow execution context ensuring precise and tight access control. The resultant security system has been incorporated into a prototype eRadiology workflow to enable authorized access to patient information when and where needed.

Paper Citation

in Harvard Style

Koufi V., Malamateniou F. and Vassilacopoulos G. (2010). AUTHORIZATION IN CLOUD E-RADIOLOGY SERVICES . In Proceedings of the International Conference on Knowledge Management and Information Sharing - Volume 1: KMIS, (IC3K 2010) ISBN 978-989-8425-30-0, pages 273-279. DOI: 10.5220/0003144402730279

in Bibtex Style

@conference{kmis10,
author={Vassiliki Koufi and Flora Malamateniou and George Vassilacopoulos},
title={AUTHORIZATION IN CLOUD E-RADIOLOGY SERVICES},
booktitle={Proceedings of the International Conference on Knowledge Management and Information Sharing - Volume 1: KMIS, (IC3K 2010)},
year={2010},
pages={273-279},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0003144402730279},
isbn={978-989-8425-30-0},
}

in EndNote Style

TY - CONF
JO - Proceedings of the International Conference on Knowledge Management and Information Sharing - Volume 1: KMIS, (IC3K 2010)
TI - AUTHORIZATION IN CLOUD E-RADIOLOGY SERVICES
SN - 978-989-8425-30-0
AU - Koufi V.
AU - Malamateniou F.
AU - Vassilacopoulos G.
PY - 2010
SP - 273
EP - 279
DO - 10.5220/0003144402730279