Access Control Model for Cooperative Healthcare Environments: Modeling and Verification

Integrated use of electronic health records (EHRs) seem both promising and necessary in improving the quality and delivery of health services. This allows healthcare providers access to information they require to provide rapid patient care. Of course, when sensitive information is shared among a group of people within or across organizations, enforceable security and privacy control over the information flow is a key aspect. In this study, an access control model for cooperative healthcare environments is presented. A work-based access control (WBAC) model is proposed by introducing the concept of team role and modifying the user-role assignment model from previous work. Verification indicates that WBAC is flexible, easy to manage and secure. It is therefore well suited to support cooperative work performed by dynamic teams in healthcare environments.