Towards enforcement of purpose for privacy policy in distributed healthcare

Thavy Mony Annanda Rath; Jean-Noël Colin

doi:10.1109/CCNC.2013.6488578

Towards enforcement of purpose for privacy policy in distributed healthcare

Thavy Mony Annanda Rath, Jean-Noël Colin

Research output: Contribution in Book/Catalog/Report/Conference proceeding › Conference contribution

123 Downloads (Pure)

Abstract

Purpose of access is one of the core concepts in privacy which considers the data user's intent as a factor in making access control decisions and enforcement of purpose is required to ensure that data is used as what it intends for. In general, the enforcement of purpose is a complicated task. The main difficulty is how to identify the purpose of an agent when it requests to perform an action. In this paper, we discuss the design issue of purpose enforcement based on our proposed (defined) enforcement structure: pre-enforcement, ongoing-enforcement, and post-enforcement. We also propose an enforcement solution for usage control designed for distributed healthcare information system, particularly, the pre-enforcement of purpose (the validation of claimed purpose at the initial state before data is granted access).

Original language	English
Title of host publication	2013 IEEE 10th Consumer Communications and Networking Conference, CCNC 2013
Pages	881-886
Number of pages	6
DOIs	https://doi.org/10.1109/CCNC.2013.6488578
Publication status	Published - 15 Apr 2013
Event	2013 IEEE 10th Consumer Communications and Networking Conference, CCNC 2013 - Las Vegas, United States Duration: 11 Jan 2013 → 14 Jan 2013

Conference

Conference	2013 IEEE 10th Consumer Communications and Networking Conference, CCNC 2013
Country/Territory	United States
City	Las Vegas
Period	11/01/13 → 14/01/13

Keywords

distributed healthcare
privacy
purpose enforcement
security

Access to Document

10.1109/CCNC.2013.6488578

Toward enforcement of purposeSubmitted manuscript, 187 KB

Cite this

@inproceedings{4973780ec7a74225905aab616ca65f31,

title = "Towards enforcement of purpose for privacy policy in distributed healthcare",

abstract = "Purpose of access is one of the core concepts in privacy which considers the data user's intent as a factor in making access control decisions and enforcement of purpose is required to ensure that data is used as what it intends for. In general, the enforcement of purpose is a complicated task. The main difficulty is how to identify the purpose of an agent when it requests to perform an action. In this paper, we discuss the design issue of purpose enforcement based on our proposed (defined) enforcement structure: pre-enforcement, ongoing-enforcement, and post-enforcement. We also propose an enforcement solution for usage control designed for distributed healthcare information system, particularly, the pre-enforcement of purpose (the validation of claimed purpose at the initial state before data is granted access).",

keywords = "distributed healthcare, privacy, purpose enforcement, security",

author = "Rath, {Thavy Mony Annanda} and Jean-No{\"e}l Colin",

year = "2013",

month = apr,

day = "15",

doi = "10.1109/CCNC.2013.6488578",

language = "English",

isbn = "9781467331333",

pages = "881--886",

booktitle = "2013 IEEE 10th Consumer Communications and Networking Conference, CCNC 2013",

note = "2013 IEEE 10th Consumer Communications and Networking Conference, CCNC 2013 ; Conference date: 11-01-2013 Through 14-01-2013",

}

Rath, TMA & Colin, J-N 2013, Towards enforcement of purpose for privacy policy in distributed healthcare. in 2013 IEEE 10th Consumer Communications and Networking Conference, CCNC 2013., 6488578, pp. 881-886, 2013 IEEE 10th Consumer Communications and Networking Conference, CCNC 2013, Las Vegas, Nevada, United States, 11/01/13. https://doi.org/10.1109/CCNC.2013.6488578

TY - GEN

T1 - Towards enforcement of purpose for privacy policy in distributed healthcare

AU - Rath, Thavy Mony Annanda

AU - Colin, Jean-Noël

PY - 2013/4/15

Y1 - 2013/4/15

N2 - Purpose of access is one of the core concepts in privacy which considers the data user's intent as a factor in making access control decisions and enforcement of purpose is required to ensure that data is used as what it intends for. In general, the enforcement of purpose is a complicated task. The main difficulty is how to identify the purpose of an agent when it requests to perform an action. In this paper, we discuss the design issue of purpose enforcement based on our proposed (defined) enforcement structure: pre-enforcement, ongoing-enforcement, and post-enforcement. We also propose an enforcement solution for usage control designed for distributed healthcare information system, particularly, the pre-enforcement of purpose (the validation of claimed purpose at the initial state before data is granted access).

AB - Purpose of access is one of the core concepts in privacy which considers the data user's intent as a factor in making access control decisions and enforcement of purpose is required to ensure that data is used as what it intends for. In general, the enforcement of purpose is a complicated task. The main difficulty is how to identify the purpose of an agent when it requests to perform an action. In this paper, we discuss the design issue of purpose enforcement based on our proposed (defined) enforcement structure: pre-enforcement, ongoing-enforcement, and post-enforcement. We also propose an enforcement solution for usage control designed for distributed healthcare information system, particularly, the pre-enforcement of purpose (the validation of claimed purpose at the initial state before data is granted access).

KW - distributed healthcare

KW - privacy

KW - purpose enforcement

KW - security

UR - http://www.scopus.com/inward/record.url?scp=84875988521&partnerID=8YFLogxK

U2 - 10.1109/CCNC.2013.6488578

DO - 10.1109/CCNC.2013.6488578

M3 - Conference contribution

AN - SCOPUS:84875988521

SN - 9781467331333

SP - 881

EP - 886

BT - 2013 IEEE 10th Consumer Communications and Networking Conference, CCNC 2013

T2 - 2013 IEEE 10th Consumer Communications and Networking Conference, CCNC 2013

Y2 - 11 January 2013 through 14 January 2013

ER -

Towards enforcement of purpose for privacy policy in distributed healthcare

Abstract

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Application of DRM scheme to secure nomad confidential data

Cite this

Towards enforcement of purpose for privacy policy in distributed healthcare

Abstract

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Projects

Application of DRM scheme to secure nomad confidential data

Cite this