A risk-based evaluation of group access control approaches in a healthcare setting

  • Authors:
  • Maria B. Line;Inger Anne Tøndel;Erlend Andreas Gjære

  • Affiliations:
  • SINTEF ICT, Trondheim, Norway;SINTEF ICT, Trondheim, Norway;SINTEF ICT, Trondheim, Norway

  • Venue:
  • ARES'11 Proceedings of the IFIP WG 8.4/8.9 international cross domain conference on Availability, reliability and security for business, enterprise and health information systems
  • Year:
  • 2011

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper focuses on access control approaches usable for information sharing through large screens where several individuals are present at the same time. Access control in this setting is quite different from traditional systems where a user logs on to the system. The paper outlines a number of possible approaches to access control, and evaluates them based on criteria derived from risk analyses of a planned coordination system for the perioperative hospital environment. It concludes that future work should focus on extending the location-based approach with situation awareness, and add support for using pop-ups or handheld devices for sharing of the most sensitive information.