{"id":"https://openalex.org/W2003752715","doi":"https://doi.org/10.1145/2752952.2752962","title":"Relationship-Based Access Control for an Open-Source Medical Records System","display_name":"Relationship-Based Access Control for an Open-Source Medical Records System","publication_year":2015,"publication_date":"2015-06-01","ids":{"openalex":"https://openalex.org/W2003752715","doi":"https://doi.org/10.1145/2752952.2752962","mag":"2003752715"},"language":"en","primary_location":{"id":"doi:10.1145/2752952.2752962","doi":"https://doi.org/10.1145/2752952.2752962","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2752952.2752962","pdf_url":null,"source":{"id":"https://openalex.org/S7407087914","display_name":"ACM Symposium on Access Control Models and Technologies (SACMAT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 20th ACM Symposium on Access Control Models and Technologies","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5086845534","display_name":"Syed Zain R. Rizvi","orcid":"https://orcid.org/0009-0006-8064-9388","observed_orcids":["https://orcid.org/0009-0006-8064-9388","https://orcid.org/0000-0002-1127-3704"]},"institutions":[{"id":"https://openalex.org/I168635309","display_name":"University of Calgary","ror":"https://ror.org/03yjb2x39","country_code":"CA","type":"education","lineage":["https://openalex.org/I168635309"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Syed Zain R. Rizvi","raw_affiliation_strings":["University of Calgary, Calgary, AB, Canada","University of Calgary; Calgary; AB; Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Calgary, Calgary, AB, Canada","institution_ids":["https://openalex.org/I168635309"]},{"raw_affiliation_string":"University of Calgary; Calgary; AB; Canada","institution_ids":["https://openalex.org/I168635309"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101823697","display_name":"Philip W. L. Fong","orcid":"https://orcid.org/0000-0003-3525-8194","observed_orcids":["https://orcid.org/0000-0003-3525-8194","https://orcid.org/0000-0002-7974-3653"]},"institutions":[{"id":"https://openalex.org/I168635309","display_name":"University of Calgary","ror":"https://ror.org/03yjb2x39","country_code":"CA","type":"education","lineage":["https://openalex.org/I168635309"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Philip W.L. Fong","raw_affiliation_strings":["University of Calgary, Calgary, AB, Canada","University of Calgary; Calgary; AB; Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Calgary, Calgary, AB, Canada","institution_ids":["https://openalex.org/I168635309"]},{"raw_affiliation_string":"University of Calgary; Calgary; AB; Canada","institution_ids":["https://openalex.org/I168635309"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109050799","display_name":"Jason Crampton","orcid":"https://orcid.org/0000-0003-2151-8426","observed_orcids":["https://orcid.org/0000-0003-2151-8426"]},"institutions":[{"id":"https://openalex.org/I184558857","display_name":"Royal Holloway University of London","ror":"https://ror.org/04g2vpn86","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I184558857"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Jason Crampton","raw_affiliation_strings":["Royal Holloway, University of London, Egham, United Kingdom","Royal Holloway, University of London, Egham , United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Royal Holloway, University of London, Egham, United Kingdom","institution_ids":["https://openalex.org/I184558857"]},{"raw_affiliation_string":"Royal Holloway, University of London, Egham , United Kingdom","institution_ids":["https://openalex.org/I184558857"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5055610194","display_name":"James Sellwood","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I184558857","display_name":"Royal Holloway University of London","ror":"https://ror.org/04g2vpn86","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I184558857"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"James Sellwood","raw_affiliation_strings":["Royal Holloway, University of London, Egham, United Kingdom","Royal Holloway, University of London, Egham , United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Royal Holloway, University of London, Egham, United Kingdom","institution_ids":["https://openalex.org/I184558857"]},{"raw_affiliation_string":"Royal Holloway, University of London, Egham , United Kingdom","institution_ids":["https://openalex.org/I184558857"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":21.8038,"has_fulltext":false,"cited_by_count":36,"citation_normalized_percentile":{"value":0.99304866,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"113","last_page":"124"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T13999","display_name":"Digital Rights Management and Security","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/relationship-based-access-control","display_name":"relationship-based access control","score":0.9779999852180481},{"id":"https://openalex.org/keywords/medical-record-systems","display_name":"medical record systems","score":0.718999981880188},{"id":"https://openalex.org/keywords/healthcare-information-security","display_name":"healthcare information security","score":0.6970000267028809},{"id":"https://openalex.org/keywords/authorization","display_name":"authorization","score":0.5640000104904175},{"id":"https://openalex.org/keywords/open-source-software","display_name":"open source software","score":0.6779999732971191},{"id":"https://openalex.org/keywords/access-control-models","display_name":"access control models","score":0.6579999923706055}],"concepts":[{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.8592575788497925},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.7407795190811157},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6564017534255981},{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.6045950055122375},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5652258396148682},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.5441561341285706},{"id":"https://openalex.org/C195910791","wikidata":"https://www.wikidata.org/wiki/Q1324077","display_name":"Medical record","level":2,"score":0.48509037494659424},{"id":"https://openalex.org/C44415380","wikidata":"https://www.wikidata.org/wiki/Q17008721","display_name":"Computer access control","level":3,"score":0.4455128312110901},{"id":"https://openalex.org/C160735492","wikidata":"https://www.wikidata.org/wiki/Q31207","display_name":"Health care","level":2,"score":0.4425677955150604},{"id":"https://openalex.org/C3018397939","wikidata":"https://www.wikidata.org/wiki/Q3644502","display_name":"Open source","level":3,"score":0.4361325204372406},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.343689501285553},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.33917322754859924},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.14102452993392944},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.11888489127159119},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09777519106864929},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C126838900","wikidata":"https://www.wikidata.org/wiki/Q77604","display_name":"Radiology","level":1,"score":0.0},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2752952.2752962","doi":"https://doi.org/10.1145/2752952.2752962","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2752952.2752962","pdf_url":null,"source":{"id":"https://openalex.org/S7407087914","display_name":"ACM Symposium on Access Control Models and Technologies (SACMAT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 20th ACM Symposium on Access Control Models and Technologies","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G2665342068","display_name":null,"funder_award_id":"RGPIN-2014-06611","funder_id":"https://openalex.org/F4320334593","funder_display_name":"Natural Sciences and Engineering Research Council of Canada"},{"id":"https://openalex.org/G5166749029","display_name":null,"funder_award_id":"950-229712","funder_id":"https://openalex.org/F4320320994","funder_display_name":"Canada Research Chairs"}],"funders":[{"id":"https://openalex.org/F4320320994","display_name":"Canada Research Chairs","ror":"https://ror.org/0517h6h17"},{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W1553884617","https://openalex.org/W1606337480","https://openalex.org/W1869701259","https://openalex.org/W1964838363","https://openalex.org/W1981058821","https://openalex.org/W1997862012","https://openalex.org/W1998591172","https://openalex.org/W2010429444","https://openalex.org/W2029414465","https://openalex.org/W2036467405","https://openalex.org/W2043563246","https://openalex.org/W2053741629","https://openalex.org/W2063703813","https://openalex.org/W2065762849","https://openalex.org/W2066190737","https://openalex.org/W2130883967","https://openalex.org/W2134248998","https://openalex.org/W2135414215","https://openalex.org/W2141752622","https://openalex.org/W2143238865","https://openalex.org/W2147203995","https://openalex.org/W2166602595","https://openalex.org/W4254691308","https://openalex.org/W4299351893"],"related_works":["https://openalex.org/W1990260561","https://openalex.org/W2357728851","https://openalex.org/W2355345331","https://openalex.org/W1466567525","https://openalex.org/W1596015467","https://openalex.org/W2094052616","https://openalex.org/W2555738791","https://openalex.org/W2017675414","https://openalex.org/W1593822213","https://openalex.org/W2367441718"],"abstract_inverted_index":{"Inspired":[0],"by":[1,68,74],"the":[2,33,36,40],"access":[3,20,37],"control":[4,21],"models":[5],"of":[6],"social":[7],"network":[8],"systems,":[9],"Relationship-Based":[10],"Access":[11],"Control":[12],"(ReBAC)":[13],"was":[14],"recently":[15],"proposed":[16],"as":[17],"a":[18],"general-purpose":[19],"paradigm":[22],"for":[23],"application":[24,52],"domains":[25],"in":[26,54],"which":[27,55],"authorization":[28],"must":[29],"take":[30],"into":[31],"account":[32],"relationship":[34],"between":[35],"requestor":[38],"and":[39],"resource":[41],"owner.":[42],"The":[43],"healthcare":[44],"domain":[45,53],"is":[46,57],"envisioned":[47],"to":[48],"be":[49,65],"an":[50],"archetypical":[51],"ReBAC":[56],"sorely":[58],"needed:":[59],"e.g.,":[60],"my":[61,69],"patient":[62],"record":[63],"should":[64],"accessible":[66],"only":[67],"family":[70],"doctor,":[71],"but":[72],"not":[73],"all":[75],"doctors.":[76]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":5},{"year":2017,"cited_by_count":5},{"year":2016,"cited_by_count":8}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2025-10-10T00:00:00"}