政大機構典藏-National Chengchi University Institutional Repository(NCCUR):Item 140.119/75977

政大典藏 > College of Informatics > Department of Computer Science > Periodical Articles > Item 140.119/75977

Please use this identifier to cite or link to this item: https://nccur.lib.nccu.edu.tw/handle/140.119/75977

Title:	Aspect-oriented design and implementation of adaptable access control for Electronic Medical Records
Authors:	Chen, Kung 陳恭 Chang, Y.-C.
Contributors:	資科系
Keywords:	Access control logic;Aspect-J;Aspect-oriented;Aspect-oriented designs;Aspect-oriented programming;Dynamic adjustment;Electronic medical record;EMR systems;Implementation scheme;Prototype implementations;Runtimes;XML format;Computer systems programming;Electric relays;Medical computing;Program interpreters;Security systems;Software prototyping;Synthesis (chemical);Access control;access to information;article;aspect oriented programming;computer program;electronic medical record;human;medical informatics;medical information system;priority journal;web browser;Access to Information;Computer Communication Networks;Confidentiality;Electronic Health Records;Internet;Software;Taiwan
Date:	2010-03
Issue Date:	2015-06-18 17:17:25 (UTC+8)
Abstract:	Objectives: Maintaining proper access control to Electronic Medical Records (EMR) is essential to protecting patients` privacy. We aim to develop mechanisms and tools that can support fine-grained and adaptable access control for EMR. Method: This paper presents an aspect-oriented design and implementation scheme to providing adaptable access control for Web-based EMR systems. In our scheme, access control logic is decoupled from the core of the EMR application and collected into separate aspect modules which are automatically synthesized from access control rules in XML format and properly designed aspect templates. The generated aspect modules will then be compiled and integrated into the underlying EMR application using standard aspect tools. At runtime, these binary aspect modules will be executed to enforce the required access control. Future changes of access control rules can also be effectively realized through these mechanisms without actual coding. Results: A structured form of access control rules based on the Taiwan Electronic Medical Record Template, a suite of abstract aspects and templates for enforcing access control and a translator for synthesizing the complete access control code in AspectJ from such access control rules and aspect templates. We have also built a Web-based EMR prototype implementation to demonstrate our approach. Conclusion: Our approach can not only accommodate a wide range of fine-grained access control requirements but also enforce them in a modular and easy to adapt manner without incurring extra performance overhead due to rule interpretation. The use of aspect-oriented technology to provide adaptable access control for EMR is a promising approach. We have further enhanced our scheme with a mechanism for dynamic adjustment of access control rules. Other tools for authoring and analyzing the access control rules are the main parts of our future work. © 2010 Elsevier Ireland Ltd. All rights reserved.
Relation:	International Journal of Medical Informatics,Volume 79, Issue 3, Pages 181-203
Data Type:	article
DOI link:	http://dx.doi.org/10.1016/j.ijmedinf.2009.12.007
DOI:	10.1016/j.ijmedinf.2009.12.007
Appears in Collections:	[Department of Computer Science ] Periodical Articles

Files in This Item:

File	Description	Size	Format
1-s2.0-S1386505610000055-main.pdf		4702Kb	Adobe PDF2	746	View/Open

社群 sharing

Loading...