{"id":"https://openalex.org/W2020697541","doi":"https://doi.org/10.1109/isias.2010.5604060","title":"Reconciling IHE-ATNA profile with a posteriori contextual access and usage control policy in healthcare environment","display_name":"Reconciling IHE-ATNA profile with a posteriori contextual access and usage control policy in healthcare environment","publication_year":2010,"publication_date":"2010-08-01","ids":{"openalex":"https://openalex.org/W2020697541","doi":"https://doi.org/10.1109/isias.2010.5604060","mag":"2020697541"},"language":"en","primary_location":{"id":"doi:10.1109/isias.2010.5604060","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isias.2010.5604060","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2010 Sixth International Conference on Information Assurance and Security","raw_type":"proceedings-article"},"type":"preprint","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024557619","display_name":"Hanieh Azkia","orcid":null},"institutions":[{"id":"https://openalex.org/I19370010","display_name":"Orange (France)","ror":"https://ror.org/035j0tq82","country_code":"FR","type":"company","lineage":["https://openalex.org/I19370010"]}],"countries":["FR"],"is_corresponding":true,"raw_author_name":"Hanieh Azkia","raw_affiliation_strings":["IT/Telecom, Cesson-Sevigne, France","IT/Telecom Bretagne 2 Rue de la Ch\u00e2taigneraie 35576 Cesson S\u00e9vign\u00e9, France"],"affiliations":[{"raw_affiliation_string":"IT/Telecom, Cesson-Sevigne, France","institution_ids":["https://openalex.org/I19370010"]},{"raw_affiliation_string":"IT/Telecom Bretagne 2 Rue de la Ch\u00e2taigneraie 35576 Cesson S\u00e9vign\u00e9, France","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026767524","display_name":"Nora Cuppens-Boulahia","orcid":null},"institutions":[{"id":"https://openalex.org/I19370010","display_name":"Orange (France)","ror":"https://ror.org/035j0tq82","country_code":"FR","type":"company","lineage":["https://openalex.org/I19370010"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Nora Cuppens-Boulahia","raw_affiliation_strings":["IT/Telecom, Cesson-Sevigne, France","IT/Telecom Bretagne 2 Rue de la Ch\u00e2taigneraie 35576 Cesson S\u00e9vign\u00e9, France"],"affiliations":[{"raw_affiliation_string":"IT/Telecom, Cesson-Sevigne, France","institution_ids":["https://openalex.org/I19370010"]},{"raw_affiliation_string":"IT/Telecom Bretagne 2 Rue de la Ch\u00e2taigneraie 35576 Cesson S\u00e9vign\u00e9, France","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113930460","display_name":"Fr\u00e9d\u00e9ric Cuppens","orcid":null},"institutions":[{"id":"https://openalex.org/I19370010","display_name":"Orange (France)","ror":"https://ror.org/035j0tq82","country_code":"FR","type":"company","lineage":["https://openalex.org/I19370010"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Frederic Cuppens","raw_affiliation_strings":["IT/Telecom, Cesson-Sevigne, France","IT/Telecom Bretagne 2 Rue de la Ch\u00e2taigneraie 35576 Cesson S\u00e9vign\u00e9, France"],"affiliations":[{"raw_affiliation_string":"IT/Telecom, Cesson-Sevigne, France","institution_ids":["https://openalex.org/I19370010"]},{"raw_affiliation_string":"IT/Telecom Bretagne 2 Rue de la Ch\u00e2taigneraie 35576 Cesson S\u00e9vign\u00e9, France","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5062289182","display_name":"Gouenou Coatrieux","orcid":"https://orcid.org/0000-0002-5643-0224"},"institutions":[{"id":"https://openalex.org/I19370010","display_name":"Orange (France)","ror":"https://ror.org/035j0tq82","country_code":"FR","type":"company","lineage":["https://openalex.org/I19370010"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Gouenou Coatrieux","raw_affiliation_strings":["IT/Telecom, Cesson-Sevigne, France","IT/Telecom Bretagne 2 Rue de la Ch\u00e2taigneraie 35576 Cesson S\u00e9vign\u00e9, France"],"affiliations":[{"raw_affiliation_string":"IT/Telecom, Cesson-Sevigne, France","institution_ids":["https://openalex.org/I19370010"]},{"raw_affiliation_string":"IT/Telecom Bretagne 2 Rue de la Ch\u00e2taigneraie 35576 Cesson S\u00e9vign\u00e9, France","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5024557619"],"corresponding_institution_ids":["https://openalex.org/I19370010"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.20823993,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":95},"biblio":{"volume":"1","issue":null,"first_page":"197","last_page":"203"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9904000163078308,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10679","display_name":"Service-Oriented Architecture and Web Services","score":0.9890999794006348,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.8390012979507446},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6782457828521729},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.5766504406929016},{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"Role-based access control","score":0.5737465023994446},{"id":"https://openalex.org/keywords/restructuring","display_name":"Restructuring","score":0.567651093006134},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.566581130027771},{"id":"https://openalex.org/keywords/health-care","display_name":"Health care","score":0.5311115384101868},{"id":"https://openalex.org/keywords/computer-access-control","display_name":"Computer access control","score":0.49697116017341614},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.4855475127696991},{"id":"https://openalex.org/keywords/data-access","display_name":"Data access","score":0.4640715718269348},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.4539593756198883},{"id":"https://openalex.org/keywords/audit-trail","display_name":"Audit trail","score":0.4438965618610382},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4248027205467224},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4242624342441559},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.27083641290664673},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.18500232696533203},{"id":"https://openalex.org/keywords/accounting","display_name":"Accounting","score":0.10029736161231995},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.0871075987815857}],"concepts":[{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.8390012979507446},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6782457828521729},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.5766504406929016},{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.5737465023994446},{"id":"https://openalex.org/C45237549","wikidata":"https://www.wikidata.org/wiki/Q1376796","display_name":"Restructuring","level":2,"score":0.567651093006134},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.566581130027771},{"id":"https://openalex.org/C160735492","wikidata":"https://www.wikidata.org/wiki/Q31207","display_name":"Health care","level":2,"score":0.5311115384101868},{"id":"https://openalex.org/C44415380","wikidata":"https://www.wikidata.org/wiki/Q17008721","display_name":"Computer access control","level":3,"score":0.49697116017341614},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.4855475127696991},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.4640715718269348},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.4539593756198883},{"id":"https://openalex.org/C80958533","wikidata":"https://www.wikidata.org/wiki/Q1047174","display_name":"Audit trail","level":3,"score":0.4438965618610382},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4248027205467224},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4242624342441559},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.27083641290664673},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.18500232696533203},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.10029736161231995},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0871075987815857},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/isias.2010.5604060","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isias.2010.5604060","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2010 Sixth International Conference on Information Assurance and Security","raw_type":"proceedings-article"},{"id":"pmh:oai:publications.polymtl.ca:46693","is_oa":false,"landing_page_url":"https://publications.polymtl.ca/46693/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401013","display_name":"PolyPublie (\u00c9cole Polytechnique de Montr\u00e9al)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I45683168","host_organization_name":"Polytechnique Montr\u00e9al","host_organization_lineage":["https://openalex.org/I45683168"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Communication de conf\u00e9rence"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7699999809265137,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320320883","display_name":"Agence Nationale de la Recherche","ror":"https://ror.org/00rbzpz17"},{"id":"https://openalex.org/F4320327215","display_name":"R\u00e9gion Bretagne","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W1593638772","https://openalex.org/W1813188286","https://openalex.org/W1866339061","https://openalex.org/W1915075355","https://openalex.org/W1964782951","https://openalex.org/W1991895580","https://openalex.org/W2034590833","https://openalex.org/W2095872579","https://openalex.org/W2141820222","https://openalex.org/W2150512717","https://openalex.org/W2304679740","https://openalex.org/W3102845218","https://openalex.org/W4285719527","https://openalex.org/W6639061803","https://openalex.org/W6639879011","https://openalex.org/W6648271448","https://openalex.org/W6682269051","https://openalex.org/W6764000109"],"related_works":["https://openalex.org/W2094052616","https://openalex.org/W1596015467","https://openalex.org/W2105261429","https://openalex.org/W2148952798","https://openalex.org/W2102147828","https://openalex.org/W318167434","https://openalex.org/W2374393728","https://openalex.org/W2054600748","https://openalex.org/W2004519898","https://openalex.org/W2371424520"],"abstract_inverted_index":{"Traditional":[0],"access":[1,6,9,58,93,184],"control":[2,59,94,187],"mechanisms":[3,44],"prevent":[4],"illegal":[5],"by":[7,48,54,122],"controlling":[8],"right":[10],"before":[11],"executing":[12],"an":[13,100,181,191],"action;":[14],"they":[15,31],"belong":[16],"to":[17,62,98,113,125,177],"a":[18,21,42,114,182],"class":[19],"of":[20,29,80,88,131,159],"priori":[22],"security":[23,115,142,195],"solutions":[24],"and,":[25],"from":[26,68],"this":[27],"point":[28],"view,":[30],"have":[32],"some":[33],"limitations,":[34],"like":[35,197],"inflexibility":[36],"in":[37,175],"unanticipated":[38],"circumstances.":[39],"By":[40],"contrast,":[41],"posteriori":[43,183],"enforce":[45],"policies":[46],"not":[47],"preventing":[49],"unauthorized":[50],"access,":[51],"but":[52],"rather":[53],"deterring":[55],"it.":[56],"Such":[57],"needs":[60],"evidence":[61],"prove":[63],"violations.":[64],"Evidence":[65],"is":[66],"derived":[67],"one":[69],"or":[70],"several":[71],"log":[72,89,110,153,170],"records,":[73],"which":[74],"trace":[75],"each":[76],"user's":[77],"actions.":[78],"Efficiency":[79],"violation":[81],"detection":[82],"mostly":[83],"depends":[84],"on":[85,156,190],"the":[86,92,126,132,135,157,198],"compliance":[87],"records":[90,111,154,171],"with":[91],"policy.":[95,200],"In":[96],"order":[97,176],"develop":[99],"efficient":[101],"method":[102],"for":[103],"finding":[104],"these":[105],"violations,":[106],"we":[107],"propose":[108],"restructuring":[109],"according":[112],"policy":[116,196],"model.":[117],"We":[118,164],"illustrate":[119],"our":[120],"methodology":[121],"applying":[123],"it":[124],"healthcare":[127,136],"domain,":[128],"taking":[129],"care":[130],"IHE":[133],"(Integrating":[134],"enterprise)":[137],"framework,":[138],"particularly":[139],"its":[140],"basic":[141],"profile,":[143],"ATNA":[144,169],"(Audit":[145],"Trail":[146],"and":[147,166,185,193],"Node":[148],"Authentication).":[149],"This":[150],"profile":[151],"defines":[152],"established":[155],"analysis":[158],"common":[160],"health":[161],"practice":[162],"scenarios.":[163],"analyze":[165],"establish":[167],"how":[168],"can":[172],"be":[173,178],"refined":[174],"integrated":[179],"into":[180],"usage":[186],"process,":[188],"based":[189],"expressive":[192],"contextual":[194],"OrBAC":[199]},"counts_by_year":[{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":1}],"updated_date":"2026-02-09T09:26:11.010843","created_date":"2025-10-10T00:00:00"}
