Accessing electronic health records in critical incidents using context-aware attribute-based access control

In emergency situations, different actors involved in first aid services should be authorized to retrieve information from the patient’s Electronic Health Records (EHRs). The research objectives of this work involve the development and implementation of methods to characterise emergency situations requiring extraordinary access to healthcare data. The aim is to implement such methods based on contextual information pertaining to specific patients and emergency situations and also leveraging personalisation aspects which enable the efficient access control on sensitive data during emergencies. The Attribute Based Access Control paradigm is used in order to grant access to EHRs based on contextual information. We introduce an ABAC approach using personalized context handlers, in which raw contextual information can be uplifted in order to recognize critical situations and grant access to healthcare data. Results indicate that context-aware ABAC is a very effective method for detecting critical situations that require emergency access to personal health records. In comparison to RBAC implementations of emergency access control to EHRs, the proposed ABAC implementation leverages contextual information pertaining to the specific patient and emergency situations. Contextual information increases the capability of ABAC to recognize critical situations and grant access to healthcare data.

• Publication year

  2021

• Venue

  International Journal of Intelligent Decision Technologies

• Publication date

  2021-11-01

• Fields of study

  Medicine, Computer Science

• Identifiers
  DOI 10.3233/IDT-210214
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Controlled BTG: Toward Flexible Emergency Override in Interoperable Medical Systems

  2020cited by this paper
• A Context-Aware Security Model for a Combination of Attribute-Based Access Control and Attribute-Based Encryption in the Healthcare Domain

  2020cited by this paper
• An Attribute-Based Break-Glass Access Control Framework for Medical Emergencies

  2020cited by this paper
• Smart ambulance system using concept of big data and internet of things

  2019cited by this paper
• EACMS: Emergency Access Control Management System for Personal Health Record Based on Blockchain

  2019cited by this paper
• A fuzzy logic–based warning system for patients classification

  2019cited by this paper
• BTG-RKASE: Privacy Preserving Revocable Key Aggregate Searchable Encryption with Fine-grained Multi-delegation & Break-The-Glass Access Control

  2019cited by this paper
• A systematic survey of computer-aided diagnosis in medicine: Past and present developments

  2019cited by this paper
• Context-Aware Policy Enforcement for PaaS-Enabled Access Control

  2019cited by this paper
• Emergency role-based access control (E-RBAC) and analysis of model specifications with alloy

  2019cited by this paper
• Diagnosis of Coronary Artery Disease via a Novel Fuzzy Expert System Optimized by Cuckoo Search

  2018cited by this paper
• Vital Sign Measurement Across the Lifespan - 1st Canadian Edition

  2018cited by this paper
• Development of Fuzzy Expert System for Diagnosis of Diabetes

  2018cited by this paper
• A secure and cloud-based medical records access scheme for on-road emergencies

  2018cited by this paper
• Privacy-Preserving Attribute-Based Access Control Model for XML-Based Electronic Health Record System

  2018cited by this paper
• Design of an Optimized Fuzzy Classifier for the Diagnosis of Blood Pressure with a New Computational Method for Expert Rule Optimization

  2017cited by this paper
• BTG-AC: Break-the-Glass Access Control Model for Medical Data in Wireless Sensor Networks

  2016cited by this paper
• Low Blood Pressure (Hypotension)

  2016cited by this paper
• Location-Aware Authorization Scheme for Emergency Response

  2016cited by this paper
• A Novel Fuzzy Based Bio-Key Management scheme for Medical Data Security

  2016cited by this paper
• Improving diagnostic accuracy using EHR in emergency departments: A simulation-based study

  2015cited by this paper
• A Web-based Fuzzy Inference System Based Tool for Cardiovascular Disease Risk Assessment

  2015cited by this paper
• Guide to Attribute Based Access Control (ABAC) Definition and Considerations

  2014cited by this paper
• Behavior and Capability Based Access Control Model for Personalized TeleHealthCare Assistance

  2014cited by this paper
• A capability-based security approach to manage access control in the Internet of Things

  2013influential reference
• Access Control for SAR Systems

  2011cited by this paper
• A Personalized Access Control Framework for Workflow-Based Health Care Information

  2011cited by this paper
• Access Control in Data Management Systems

  2010cited by this paper
• Type-2 Fuzzy Classification of Blood Pressure Parameters

  2007cited by this paper
• A Contextual Attribute-Based Access Control Model

  2006cited by this paper
• Understanding and Using Context

  2001cited by this paper
• A secure identity-based capability system

  1989cited by this paper
• The concept of a linguistic variable and its application to approximate reasoning - II

  1975cited by this paper
• Programming semantics for multiprogrammed computations

  1966cited by this paper
• Fuzzy Sets

  1965cited by this paper

• Predicting Brain Cancer from Patients' Magnetic Resonance Imaging Using Convolutional Neural Networks

  2025cites this paper
• Blockchain enabled policy-based access control mechanism to restrict unauthorized access to electronic health records

  2025cites this paper
• BIG-ABAC: Leveraging Big Data for Adaptive, Scalable, and Context-Aware Access Control

  2025cites this paper
• Implementing a Decision Support Mechanism for Assessing the Probability of Future Alzheimer's Disease Based on the Medical and Demographic Information of Patients

  2025cites this paper
• SDDK-AC: Secure Decentralised Data-And-Knowledge Access Control for Predictive Machinery Maintenance

  2025cites this paper
• Analysis of Publications on Health Information Management Using the Science Mapping Method: A Holistic Perspective

  2024cites this paper
• SC-CAAC: A Smart-Contract-Based Context-Aware Access Control Scheme for Blockchain-Enabled IoT Systems

  2024influential citation
• Permissioned blockchain network for proactive access control to electronic health records

  2024influential citation
• A Neural Network-Based Context Handling Mechanism for Accessing the Medical Information of Patients Suffering from Coronary Heart Disease

  2024cites this paper
• A Multi-Layer Perceptron Neural Network-based Access Control Mechanism to Breast Cancer Patients' Health Data

  2024cites this paper