Role based access control for a medical database

  • Authors:
  • Lindi A. Slevin;Alex Macfie

  • Affiliations:
  • University of Westminster, London, United Kingdom;University of Westminster, London, United Kingdom

  • Venue:
  • SEA '07 Proceedings of the 11th IASTED International Conference on Software Engineering and Applications
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper describes the testing the applicability of Role Based Access Control (RBAC) within an existing medical database in the Oncology Department at St. Bartholomew's Hospital in London, United Kingdom (UK). We show how role hierarchies and RBAC rules are derived for this particular database, and observe the outcomes of our RBAC implementation. Our work is in line with the UK Government's initiative to make historical patient data available to as wide an audience as possible and to include RBAC as a security mechanism within the National Program for Information Technology (NPfIT) of the UK National Health Service (NHS).