A Framework of Access Control Model Based on Cross-entropy in Health Information System

In the health information system, an access control model needs to be developed based on medical conditions. This paper presents an access control model for health information systems. In different scenarios, different risk assessment strategies are adopted, the risk level is determined according to the evaluation results, and the corresponding policies are finally adopted. The model proposes to use the doctor's access record stored in the health information system to calculate the risk value of the visitor considering the internal and external environment, and to quantify the risk using cross entropy, KL divergence and so on.