NDLI: Deployment of a posteriori access control using IHE ATNA

Content Provider	Springer Nature Link
Author	Azkia, Hanieh Cuppens Boulahia, ra Cuppens, Frédéric Coatrieux, Goueu Oulmakhzoune, Said
Copyright Year	2014
Abstract	In healthcare information management, privacy and confidentiality are two major concerns usually satisfied by access control means. Traditional access control mechanisms prevent illegal access by controlling access right before executing an action. They have some limitations like inflexibility in unanticipated circumstances (e.g., emergency). Recently, a posteriori access control has been proposed to complete a priori protection for a more effective and flexible solution. It controls the access by deterring user from having unauthorized access. To be deployed, a posteriori access control needs evidence to prove the users’ violations. In this paper, we show how log records defined by the Integrating the Healthcare Enterprise-Audit Trail and Node Authentication (ATNA) profile can be used to deploy an a posteriori access control system. To develop an efficient method for finding violations, we propose a framework that customizes ATNA log records according to a contextual security policy like the Organization-Based Access Control. Experiments we conducted are also presented.
Starting Page	471
Ending Page	483
Page Count	13
File Format	PDF
ISSN	16155262
Journal	International Journal of Information Security
Volume Number	14
Issue Number	5
e-ISSN	16155270
Language	English
Publisher	Springer Berlin Heidelberg
Publisher Date	2014-10-12
Publisher Place	Berlin, Heidelberg
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	A posteriori access control Data security IHE-ATNA Security policy Log records Data Encryption Computer Communication Networks Operating Systems Coding and Information Theory Management of Computing and Information Systems Communications Engineering, Networks
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications Information Systems Safety, Risk, Reliability and Quality Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Flexible attribute-based encryption applicable to secure e-healthcare records

Modeling contextual security policies

Computer security

Practical chosen-ciphertext secure Hierarchical Identity-Based Broadcast Encryption

Security in cloud computing

Privacy-preserving personal health record using multi-authority attribute-based encryption with revocation

Broadcast encryption with dealership

Concrete- and abstract-based access control

Audit-based compliance control

Deployment of a posteriori access control using IHE ATNA

Similar Documents

Flexible attribute-based encryption applicable to secure e-healthcare records

Modeling contextual security policies

Computer security

Practical chosen-ciphertext secure Hierarchical Identity-Based Broadcast Encryption

Security in cloud computing

Privacy-preserving personal health record using multi-authority attribute-based encryption with revocation

Broadcast encryption with dealership

Concrete- and abstract-based access control

Audit-based compliance control

Deployment of a posteriori access control using IHE ATNA