Using Risk in Access Control for Cloud-Assisted eHealth

Cloud computing is a cutting edge technology. eHealth is one promising application of this technology. In this paper, we describe a prototype implementation of an HL7-based eHealth application on the cloud. The system is secured with a risk-aware task-based access control. We demonstrate that our access control technique is more effective for preventing unauthorized access of medical information when compared to context-aware access controls, with a small access delay of approximately one second.