Purpose Based Access Control for Privacy Protection in E-Healthcare Services

Information privacy is a major concern in many areas and none more so than in healthcare. E-healthcare is the use of web-based systems to share and deliver information across the internet. The design of proper models for authorization and access control for e-Health system services is necessary in a large health service. Usage control has been considered as the next generation access control model with distinguishing properties of decision continuity. It has been proven to be efficient to improve security administration with flexible authorization management. Usage control enables finer-grained control over usage of digital objects than that of traditional access control policies and models. In this paper, we have enriched the research for usage access control with purpose extension that is able to be applied in the field of medical information system or e-Healthcare system. This work provides a foundation for developing appropriate security solutions for organizations’ secure digital information and will contribute to higher security in the medical information systems.