Cerberus, an Access Control Scheme for Enforcing Least Privilege in Patient Cohort Study Platforms.
Cohort Study Platforms (CSP) are emerging as a key tool for collecting patient information, providing new research data, and supporting family and patient associations. However they pose new ethics and regulatory challenges since they cross the gap between patients and medical practitioners. One of...
| Published in: | Journal of Medical Systems Vol. 42; no. 1; pp. 1 - 20 |
|---|---|
| Main Authors: | , , , , |
| Format: | computer program equations & formulas pictorial tables/charts Journal Article |
| Published: |
Springer Nature
Jan2018
|
| Online Access: | View this record in EBSCOhost |
| fields | @attributes: recordID: 1 pdfLink: plink: https://search.ebscohost.com/login.aspx?direct=true&db=ccm&AN=127145162&site=ehost-live header: @attributes: shortDbName: ccm uiTerm: 127145162 longDbName: CINAHL Complete uiTag: AN controlInfo: bkinfo: dissinfo: jinfo: jid: 01485598 4N0 jtl: Journal of Medical Systems issn: 01485598 maglogo: N pubinfo: dt: Jan2018 vid: 42 iid: 1 pid: 237 pub: Springer Nature place: New York, New York artinfo: ui: 127145162 127145162 127145162 10.1007/s10916-017-0844-y 127145162 ppf: 1 ppct: 19 formats: fmt: – @attributes: type: T – @attributes: type: P tig: atl: Cerberus, an Access Control Scheme for Enforcing Least Privilege in Patient Cohort Study Platforms. aug: au: Parrend, Pierre Mazzucotelli, Timothée Colin, Florent Collet, Pierre Mandel, Jean-Louis affil: ECAM Strasbourg-Europe, 2 Rue de Madrid, 67300, Schiltigheim, France sug: subj: Research, Medical Access to Information Intellectual Disability Familial and Genetic Autism Spectrum Disorder Familial and Genetic Software Prospective Studies ab: Cohort Study Platforms (CSP) are emerging as a key tool for collecting patient information, providing new research data, and supporting family and patient associations. However they pose new ethics and regulatory challenges since they cross the gap between patients and medical practitioners. One of the critical issues for CSP is to enforce a strict control on access privileges whilst allowing the users to take advantage of the breadth of the available data. We propose Cerberus, a new access control scheme spanning the whole life-cycle of access right management: design, implementation, deployment and maintenance, operations. Cerberus enables switching from a dual world, where CSP data can be accessed either from the users who entered it or fully de-identified, to an access-when-required world, where patients, practitioners and researchers can access focused medical data through explicit authorisation by the data owner. Efficient access control requires application-specific access rights, as well as the ability to restrict these rights when they are not used. Cerberus is implemented and evaluated in the context of the GENIDA project, an international CSP for Genetically determined Intellectual Disabilities and Autism Spectrum Disorders. As a result of this study, the software is made available for the community, and validated specifications for CSPs are given. pubtype: Academic Journal doctype: computer program equations & formulas pictorial tables/charts Journal Article ougenre: Article language: English refInfo: holdings: @attributes: islocal: N |
|---|