@inproceedings{dd050d96823d404da68cc5a24131f80d,
title = "SGAC: A patient-centered access control method",
abstract = "This paper presents SGAC(Solution de Gestion Automatis{\'e}e du Consentement, automatised consent management solution), a new healthcare access control model and its support tool, that manages patient wishes regarding access to their electronic health record (EHR). The development of this model has been achieved in the scope of a project with the Sherbrooke University Hospital, and thus has been adapted to take into account laws and regulations applicable in Qu{\'e}bec and Canada, as they set bounds to patient wishes: under strictly defined contexts, patient consent can be overridden to protect his/her life. Moreover, since patient wishes and laws can be in conflict, SGAC provides a mechanism to address this problem. Besides, laws do not cover all cases where consent should be overridden to ensure patient safety. To this end, we define a formal model of SGAC which allows for property verification, making it possible to detect these cases. A performance comparison with XACML (WSO2/Balana) is presented and demonstrates the superior performances of SGAC.",
keywords = "access control method, consent management, formal model, healthcare, verification",
author = "Nghi Huynh and Marc Frappier and Herman Pooda and Amel Mammar and Regine Laleau",
note = "Publisher Copyright: {\textcopyright} 2016 IEEE.; 10th IEEE International Conference on Research Challenges in Information Science, IEEE RCIS 2016 ; Conference date: 01-05-2016 Through 03-05-2016",
year = "2016",
month = aug,
day = "23",
doi = "10.1109/RCIS.2016.7549286",
language = "English",
series = "Proceedings - International Conference on Research Challenges in Information Science",
publisher = "IEEE Computer Society",
editor = "Jolita Ralyte and Sergio Espana and Carine Souveyet",
booktitle = "IEEE RCIS 2016 - IEEE 10th International Conference on Research Challenges in Information Science",
}