An Enhanced Role-Based Access Control Mechanism for Hospital Information Systems

This paper describes the security of hospital information system with particular requirements on electric patient record format and application scenarios, and proposes an enhanced role-based access control (ERBAC) mechanism based on the principle of fine granularity through decomposing the access privilege of sources to finer granularities. Through the study on the social relationships of the individual identity, a formal definition of ERBAC is detailed with implementation of a practical access control policy extended from the core RBAC. The object of each session shall be finer granularity so that the subjects can be accessed using more flexible privileges according to different contexts of environment under this policy.