An extend RBAC model for privacy protection in HIS

Abstract

With the continuous development of Healthcare information systems (HIS) [1], malicious and unauthorized access has increased, privacy disclosure issues gradually serious. In order to protect the privacy of HIS, this paper adds context to privacy information access, proposes a new method to realize context constraints, this method rates the context in which the subject is located, determines whether the access is allowed by judging whether the level satisfies the conditions. By adding context constraints to the access, the risk of privacy disclosure is greatly reduced and privacy protection is realized.