Information security is one of the top problems of business executive and information system managers alike. Pervasive use of information technology in all aspects of business today as well as highlighted need for regulatory compliance calls for analysis of information systems in their entirety – going beyond technical aspects and considering people and organizations as well. In my dissertation...

OBJECTIVE To visualize and describe collaborative electronic health record (EHR) usage for hospitalized patients with heart failure. MATERIALS AND METHODS We identified records of patients with heart failure and all associated healthcare provider record usage through queries of the Northwestern Medicine Enterprise Data Warehouse. We constructed a network by equating access and updates of a pa...

Available online public/governmental services requiring authentication by citizens have considerably expanded in recent years. This has hindered the usability and security associated with credential management by users and service providers. To address the problem, some countries have proposed nation-scale identification/authentication systems that intend to greatly reduce the burden of credent...

Provenance is a record that describes the people, institutions, entities, and activities involved in producing, influencing, or delivering a piece of data or a thing. The W3C Provenance Working group has just published the prov family of specifications, which include a data model for provenance on the Web. The working group introduces a notion of valid prov document whose intent is to ensure th...

This paper describes a conceptual model for attribute aggregation that allows a service provider (SP) to authorise a user’s access request based on attributes asserted by multiple identity providers (IdPs), when the user is known by different identities at each of the IdPs. The user only needs to authenticate to one of the IdPs and the SP is given an overall level of assurance (LoA) about the a...

The existing model of Federated Identity Management (FIM) allows a user to provide attributes only from a single Identity Provider (IdP) per service session. However, this does not cater to the fact that the user attributes are scattered and stored across multiple IdPs. An attribute aggregation mechanism would allow a user to aggregate attributes from multiple providers and pass them to a Servi...

This contribution presents the design and implementation of a bank service, constituting a key component in a recently developed Grid accounting system solution. The Grid accounting system maintains a Grid-wide view of the resources consumed by members of a virtual organization. The bank is designed as an online service, managing the accounts of VO projects. Each service request is transparentl...

An important prerequisite for the success of any online service is ensuring that customers’ experience—via the interface—satisfies both sensory and functional needs. Developing interfaces that are responsive to customers’ needs requires a perspective on interface design as well as a deep understanding of the customers themselves. Drawing upon research in consumer behavior concerning consumer be...

This paper describes an approach to the end-user development of online services for citizens of a government agency. With reference to a typical government-to-citizen service, the paper discusses how such services are currently structured and provided to citizens, and how their implementation can be transferred from software professionals to administrative personnel, who do not generally posses...