{"id":"https://openalex.org/W2149608677","doi":"https://doi.org/10.1109/titb.2003.816562","title":"A contextual role-based access control authorization model for electronic patient record","display_name":"A contextual role-based access control authorization model for electronic patient record","publication_year":2003,"publication_date":"2003-09-01","ids":{"openalex":"https://openalex.org/W2149608677","doi":"https://doi.org/10.1109/titb.2003.816562","mag":"2149608677","pmid":"https://pubmed.ncbi.nlm.nih.gov/14518734"},"language":"en","primary_location":{"id":"doi:10.1109/titb.2003.816562","doi":"https://doi.org/10.1109/titb.2003.816562","is_oa":false,"landing_page_url":"https://doi.org/10.1109/titb.2003.816562","pdf_url":null,"source":{"id":"https://openalex.org/S68937846","display_name":"IEEE Transactions on Information Technology in Biomedicine","issn_l":"1089-7771","issn":["1089-7771","1558-0032"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Technology in Biomedicine","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064704822","display_name":"Gustavo Henrique Matos Bezerra Motta","orcid":"https://orcid.org/0000-0002-5664-5938","observed_orcids":["https://orcid.org/0000-0002-5664-5938"]},"institutions":[{"id":"https://openalex.org/I169045520","display_name":"Universidade Federal da Para\u00edba","ror":"https://ror.org/00p9vpz11","country_code":"BR","type":"education","lineage":["https://openalex.org/I169045520"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"G.H.M.B. Motta","raw_affiliation_strings":["Department of Informatics, Federal University of Paraiba, Jo\u00e3o Pessoa PB 58059-900, Brazil. gustavo.motta@incor.usp.br","Department of Informatics, Federal University of Paraiba, Joao Pessoa, Paraiba, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Informatics, Federal University of Paraiba, Jo\u00e3o Pessoa PB 58059-900, Brazil. gustavo.motta@incor.usp.br","institution_ids":["https://openalex.org/I169045520"]},{"raw_affiliation_string":"Department of Informatics, Federal University of Paraiba, Joao Pessoa, Paraiba, Brazil","institution_ids":["https://openalex.org/I169045520"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028702960","display_name":"S.S. Furuie","orcid":"https://orcid.org/0000-0002-1557-3018","observed_orcids":["https://orcid.org/0000-0002-1557-3018"]},"institutions":[{"id":"https://openalex.org/I17974374","display_name":"Universidade de S\u00e3o Paulo","ror":"https://ror.org/036rp1748","country_code":"BR","type":"education","lineage":["https://openalex.org/I17974374"]},{"id":"https://openalex.org/I4405258467","display_name":"Instituto do Cora\u00e7\u00e3o - HCFMUSP","ror":"https://ror.org/00q3jak84","country_code":"BR","type":"facility","lineage":["https://openalex.org/I4210145268","https://openalex.org/I4405258467"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"S.S. Furuie","raw_affiliation_strings":["Division of Information, Heart Institute (InCor), University of S\u00e3o Paulo Medical School, Sao Paulo, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Division of Information, Heart Institute (InCor), University of S\u00e3o Paulo Medical School, Sao Paulo, Brazil","institution_ids":["https://openalex.org/I17974374","https://openalex.org/I4405258467"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":12.4365,"has_fulltext":false,"cited_by_count":104,"citation_normalized_percentile":{"value":0.98053577,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":99},"biblio":{"volume":"7","issue":"3","first_page":"202","last_page":"207"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10350","display_name":"Electronic Health Records Systems","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/3605","display_name":"Health Information Management"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T13999","display_name":"Digital Rights Management and Security","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"role-based access control","score":0.9819999933242798},{"id":"https://openalex.org/keywords/electronic-health-records","display_name":"electronic health records","score":0.8349999785423279},{"id":"https://openalex.org/keywords/authorization-model","display_name":"authorization model","score":0.621999979019165},{"id":"https://openalex.org/keywords/patient-privacy","display_name":"patient privacy","score":0.7390000224113464},{"id":"https://openalex.org/keywords/data-confidentiality","display_name":"data confidentiality","score":0.753000020980835},{"id":"https://openalex.org/keywords/role-hierarchy","display_name":"role hierarchy","score":0.8190000057220459},{"id":"https://openalex.org/keywords/segregation-of-duties","display_name":"segregation of duties","score":0.9350000023841858},{"id":"https://openalex.org/keywords/role-conflict","display_name":"role conflict","score":0.7670000195503235},{"id":"https://openalex.org/keywords/health-information-security","display_name":"health information security","score":0.6230000257492065}],"concepts":[{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.7860614061355591},{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.7735655307769775},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.7620266675949097},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.6313859224319458},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6285185217857361},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.5889832973480225},{"id":"https://openalex.org/C44415380","wikidata":"https://www.wikidata.org/wiki/Q17008721","display_name":"Computer access control","level":3,"score":0.5518643260002136},{"id":"https://openalex.org/C31170391","wikidata":"https://www.wikidata.org/wiki/Q188619","display_name":"Hierarchy","level":2,"score":0.5465861558914185},{"id":"https://openalex.org/C100587491","wikidata":"https://www.wikidata.org/wiki/Q1474665","display_name":"Separation of duties","level":4,"score":0.5114218592643738},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.4418849050998688},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.43456581234931946},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36747997999191284},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3509921133518219},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.10947328805923462},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.09975886344909668},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.07960930466651917},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[{"descriptor_ui":"D000465","descriptor_name":"Algorithms","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D003219","descriptor_name":"Confidentiality","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D003628","descriptor_name":"Database Management Systems","qualifier_ui":"Q000458","qualifier_name":"organization & administration","is_major_topic":true},{"descriptor_ui":"D003661","descriptor_name":"Decision Support Techniques","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D011369","descriptor_name":"Professional-Patient Relations","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D016247","descriptor_name":"Information Storage and Retrieval","qualifier_ui":"Q000379","qualifier_name":"methods","is_major_topic":true},{"descriptor_ui":"D016347","descriptor_name":"Medical Records Systems, Computerized","qualifier_ui":"Q000458","qualifier_name":"organization & administration","is_major_topic":true},{"descriptor_ui":"D016494","descriptor_name":"Computer Security","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true}],"locations_count":2,"locations":[{"id":"doi:10.1109/titb.2003.816562","doi":"https://doi.org/10.1109/titb.2003.816562","is_oa":false,"landing_page_url":"https://doi.org/10.1109/titb.2003.816562","pdf_url":null,"source":{"id":"https://openalex.org/S68937846","display_name":"IEEE Transactions on Information Technology in Biomedicine","issn_l":"1089-7771","issn":["1089-7771","1558-0032"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Technology in Biomedicine","raw_type":"journal-article"},{"id":"pmid:14518734","doi":null,"is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/14518734","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on information technology in biomedicine : a publication of the IEEE Engineering in Medicine and Biology Society","raw_type":"Journal Article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5683000087738037,"id":"https://metadata.un.org/sdg/3","display_name":"Good health and well-being"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W1997199359","https://openalex.org/W2031611173","https://openalex.org/W2038121473","https://openalex.org/W2040276914","https://openalex.org/W2040652278","https://openalex.org/W2040830570","https://openalex.org/W2095584182","https://openalex.org/W2104443629","https://openalex.org/W2117386769","https://openalex.org/W2133645359","https://openalex.org/W2154765153","https://openalex.org/W2166602595","https://openalex.org/W4252871665","https://openalex.org/W4285719527","https://openalex.org/W6603522121"],"related_works":["https://openalex.org/W7120325263","https://openalex.org/W2081215194","https://openalex.org/W3193672360","https://openalex.org/W2120115519","https://openalex.org/W190023816","https://openalex.org/W2794653391","https://openalex.org/W2037557227","https://openalex.org/W156789321","https://openalex.org/W2529313366","https://openalex.org/W2071413737"],"abstract_inverted_index":{"The":[0],"design":[1],"of":[2,22,49,87,126,147],"proper":[3],"models":[4],"for":[5,10],"authorization":[6,38,77,132],"and":[7,46,80,84,92,130,144],"access":[8,36,64,103,118],"control":[9,37],"electronic":[11],"patient":[12,44,50],"record":[13],"(EPR)":[14],"is":[15,115,136],"essential":[16],"to":[17,41,56,65,110,117,141,150],"a":[18,33,73,113,127,153],"wide":[19],"scale":[20],"use":[21,98],"EPR":[23,66,120],"in":[24,108],"large":[25],"health":[26],"organizations.":[27],"In":[28],"this":[29],"paper,":[30],"we":[31],"propose":[32],"contextual":[34],"role-based":[35],"model":[39,61],"aiming":[40],"increase":[42],"the":[43,47,124,142,145,148],"privacy":[45],"confidentiality":[48],"data,":[51],"whereas":[52],"being":[53],"flexible":[54,129],"enough":[55],"consider":[57],"specific":[58],"cases.":[59],"This":[60,122],"regulates":[62],"user's":[63],"based":[67,89],"on":[68,90],"organizational":[69],"roles.":[70],"It":[71],"supports":[72],"role-tree":[74],"hierarchy":[75],"with":[76],"inheritance;":[78],"positive":[79],"negative":[81],"authorizations;":[82],"static":[83],"dynamic":[85],"separation":[86],"duties":[88],"weak":[91],"strong":[93],"role":[94],"conflicts.":[95],"Contextual":[96],"authorizations":[97],"environmental":[99],"information":[100],"available":[101],"at":[102],"time,":[104],"like":[105],"user/patient":[106],"relationship,":[107],"order":[109],"decide":[111],"whether":[112],"user":[114,149],"allowed":[116],"an":[119],"resource.":[121],"enables":[123],"specification":[125],"more":[128],"precise":[131],"policy,":[133],"where":[134],"permission":[135],"granted":[137],"or":[138],"denied":[139],"according":[140],"right":[143],"need":[146],"carry":[151],"out":[152],"particular":[154],"job":[155],"function.":[156]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":6},{"year":2016,"cited_by_count":11},{"year":2015,"cited_by_count":7},{"year":2014,"cited_by_count":2},{"year":2013,"cited_by_count":8},{"year":2012,"cited_by_count":10}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2016-06-24T00:00:00"}