{"id":"https://openalex.org/W2609036853","doi":"https://doi.org/10.1109/jbhi.2017.2696573","title":"A Knowledge-Constrained Access Control Model for Protecting Patient Privacy in Hospital Information Systems","display_name":"A Knowledge-Constrained Access Control Model for Protecting Patient Privacy in Hospital Information Systems","publication_year":2017,"publication_date":"2017-04-24","ids":{"openalex":"https://openalex.org/W2609036853","doi":"https://doi.org/10.1109/jbhi.2017.2696573","mag":"2609036853","pmid":"https://pubmed.ncbi.nlm.nih.gov/28436908"},"language":"en","primary_location":{"id":"doi:10.1109/jbhi.2017.2696573","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jbhi.2017.2696573","pdf_url":null,"source":{"id":"https://openalex.org/S2495854775","display_name":"IEEE Journal of Biomedical and Health Informatics","issn_l":"2168-2194","issn":["2168-2194","2168-2208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Journal of Biomedical and Health Informatics","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008891083","display_name":"Runtong Zhang","orcid":"https://orcid.org/0000-0003-0246-5058"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Runtong Zhang","raw_affiliation_strings":["Department of Information Management, School of Economics and Management, Beijing Jiaotong University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Management, School of Economics and Management, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007190842","display_name":"Donghua Chen","orcid":"https://orcid.org/0000-0003-1786-7551"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Donghua Chen","raw_affiliation_strings":["Department of Information Management, School of Economics and Management, Beijing Jiaotong University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-1786-7551","affiliations":[{"raw_affiliation_string":"Department of Information Management, School of Economics and Management, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071376543","display_name":"Xiaopu Shang","orcid":"https://orcid.org/0000-0002-7872-5744"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaopu Shang","raw_affiliation_strings":["Department of Information Management, School of Economics and Management, Beijing Jiaotong University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-7872-5744","affiliations":[{"raw_affiliation_string":"Department of Information Management, School of Economics and Management, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070410962","display_name":"Xiaomin Zhu","orcid":"https://orcid.org/0000-0002-5199-0062"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaomin Zhu","raw_affiliation_strings":["School of Mechanical, Electronic and Control Engineering, Beijing Jiaotong University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Mechanical, Electronic and Control Engineering, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076360588","display_name":"Kecheng Liu","orcid":"https://orcid.org/0000-0002-4642-957X"},"institutions":[{"id":"https://openalex.org/I71052956","display_name":"University of Reading","ror":"https://ror.org/05v62cm79","country_code":"GB","type":"education","lineage":["https://openalex.org/I71052956"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Kecheng Liu","raw_affiliation_strings":["Henley Business School, University of Reading, Reading, U. K"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Henley Business School, University of Reading, Reading, U. K","institution_ids":["https://openalex.org/I71052956"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.2895,"has_fulltext":false,"cited_by_count":16,"citation_normalized_percentile":{"value":0.94343286,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"22","issue":"3","first_page":"904","last_page":"911"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9929999709129333,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"Role-based access control","score":0.8597589135169983},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.8530633449554443},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7244925498962402},{"id":"https://openalex.org/keywords/mandatory-access-control","display_name":"Mandatory access control","score":0.6042778491973877},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5789976119995117},{"id":"https://openalex.org/keywords/computer-access-control","display_name":"Computer access control","score":0.5680397748947144},{"id":"https://openalex.org/keywords/discretionary-access-control","display_name":"Discretionary access control","score":0.5260158181190491},{"id":"https://openalex.org/keywords/information-access","display_name":"Information access","score":0.5132591724395752},{"id":"https://openalex.org/keywords/variety","display_name":"Variety (cybernetics)","score":0.4888152778148651},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.47246718406677246},{"id":"https://openalex.org/keywords/patient-privacy","display_name":"Patient privacy","score":0.46243155002593994},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4589553475379944},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.44904837012290955},{"id":"https://openalex.org/keywords/hospital-information-system","display_name":"Hospital information system","score":0.4183921813964844},{"id":"https://openalex.org/keywords/compromise","display_name":"Compromise","score":0.4110944867134094},{"id":"https://openalex.org/keywords/information-system","display_name":"Information system","score":0.3671033978462219},{"id":"https://openalex.org/keywords/health-care","display_name":"Health care","score":0.184617280960083},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.1826474964618683},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.13431093096733093}],"concepts":[{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.8597589135169983},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.8530633449554443},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7244925498962402},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.6042778491973877},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5789976119995117},{"id":"https://openalex.org/C44415380","wikidata":"https://www.wikidata.org/wiki/Q17008721","display_name":"Computer access control","level":3,"score":0.5680397748947144},{"id":"https://openalex.org/C48814466","wikidata":"https://www.wikidata.org/wiki/Q1228590","display_name":"Discretionary access control","level":4,"score":0.5260158181190491},{"id":"https://openalex.org/C2776543384","wikidata":"https://www.wikidata.org/wiki/Q593289","display_name":"Information access","level":2,"score":0.5132591724395752},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.4888152778148651},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.47246718406677246},{"id":"https://openalex.org/C2910417920","wikidata":"https://www.wikidata.org/wiki/Q4116434","display_name":"Patient privacy","level":3,"score":0.46243155002593994},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4589553475379944},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.44904837012290955},{"id":"https://openalex.org/C2777019752","wikidata":"https://www.wikidata.org/wiki/Q1509084","display_name":"Hospital information system","level":3,"score":0.4183921813964844},{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.4110944867134094},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.3671033978462219},{"id":"https://openalex.org/C160735492","wikidata":"https://www.wikidata.org/wiki/Q31207","display_name":"Health care","level":2,"score":0.184617280960083},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1826474964618683},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.13431093096733093},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0}],"mesh":[{"descriptor_ui":"D000465","descriptor_name":"Algorithms","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D000465","descriptor_name":"Algorithms","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D000465","descriptor_name":"Algorithms","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D003195","descriptor_name":"Computer Communication Networks","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D003195","descriptor_name":"Computer Communication Networks","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D003195","descriptor_name":"Computer Communication Networks","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D003219","descriptor_name":"Confidentiality","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D003219","descriptor_name":"Confidentiality","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D003219","descriptor_name":"Confidentiality","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D006751","descriptor_name":"Hospital Information Systems","qualifier_ui":"Q000592","qualifier_name":"standards","is_major_topic":false},{"descriptor_ui":"D006751","descriptor_name":"Hospital Information Systems","qualifier_ui":"Q000592","qualifier_name":"standards","is_major_topic":false},{"descriptor_ui":"D006751","descriptor_name":"Hospital Information Systems","qualifier_ui":"Q000592","qualifier_name":"standards","is_major_topic":false},{"descriptor_ui":"D006801","descriptor_name":"Humans","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D006801","descriptor_name":"Humans","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D006801","descriptor_name":"Humans","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D017146","descriptor_name":"Models, Organizational","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D017146","descriptor_name":"Models, Organizational","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D017146","descriptor_name":"Models, Organizational","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false}],"locations_count":3,"locations":[{"id":"doi:10.1109/jbhi.2017.2696573","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jbhi.2017.2696573","pdf_url":null,"source":{"id":"https://openalex.org/S2495854775","display_name":"IEEE Journal of Biomedical and Health Informatics","issn_l":"2168-2194","issn":["2168-2194","2168-2208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Journal of Biomedical and Health Informatics","raw_type":"journal-article"},{"id":"pmid:28436908","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/28436908","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE journal of biomedical and health informatics","raw_type":null},{"id":"pmh:oai:centaur.reading.ac.uk:76565","is_oa":false,"landing_page_url":"https://centaur.reading.ac.uk/view/creators/90002149.html>","pdf_url":null,"source":{"id":"https://openalex.org/S4306402273","display_name":"CentAUR (University of Reading)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I71052956","host_organization_name":"University of Reading","host_organization_lineage":["https://openalex.org/I71052956"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7400000095367432,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G3106669651","display_name":null,"funder_award_id":"2016YJS057","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G3376678438","display_name":null,"funder_award_id":"71532002","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320317144","display_name":"Beijing Logistics Informatics Research Base","ror":null},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W107937089","https://openalex.org/W1568357473","https://openalex.org/W1600257140","https://openalex.org/W1640992000","https://openalex.org/W1752751552","https://openalex.org/W1967221886","https://openalex.org/W1978375217","https://openalex.org/W1996224605","https://openalex.org/W1996297257","https://openalex.org/W2004956928","https://openalex.org/W2023840804","https://openalex.org/W2026177921","https://openalex.org/W2026968584","https://openalex.org/W2042557097","https://openalex.org/W2053381312","https://openalex.org/W2054999722","https://openalex.org/W2069806484","https://openalex.org/W2083758426","https://openalex.org/W2100060804","https://openalex.org/W2109290891","https://openalex.org/W2120269359","https://openalex.org/W2124234601","https://openalex.org/W2138624446","https://openalex.org/W2151148677","https://openalex.org/W2166602595","https://openalex.org/W2237909439","https://openalex.org/W2577313483"],"related_works":["https://openalex.org/W2158881272","https://openalex.org/W2770657926","https://openalex.org/W2148952798","https://openalex.org/W2505244523","https://openalex.org/W2150679111","https://openalex.org/W4246289931","https://openalex.org/W193774567","https://openalex.org/W2971830394","https://openalex.org/W3023964565","https://openalex.org/W2358777772"],"abstract_inverted_index":{"Current":[0],"access":[1,14,21,34,47,62,81,103],"control":[2,22,48,104],"mechanisms":[3],"of":[4,16,26,28,35,55,80,116],"the":[5,12,24,66,73,78,83,88,101,114,117],"hospital":[6,39],"information":[7,37,85,111],"system":[8,17],"can":[9,75,107],"hardly":[10],"identify":[11],"real":[13],"intention":[15],"users.":[18],"A":[19],"relaxed":[20],"increases":[23],"risk":[25],"compromise":[27],"patient":[29,36,84,94,110],"privacy.":[30],"To":[31],"reduce":[32],"unnecessary":[33],"by":[38,96],"staff,":[40],"this":[41],"paper":[42],"proposes":[43],"a":[44,53],"knowledge-constrained":[45],"role-based":[46,102],"(KC-RBAC)":[49],"model":[50,74],"in":[51,61],"which":[52,90],"variety":[54],"medical":[56],"domain":[57],"knowledge":[58],"is":[59],"considered":[60],"control.":[63],"Based":[64],"on":[65],"proposed":[67],"Purpose":[68],"Tree":[69],"and":[70],"knowledge-involved":[71],"algorithms,":[72],"dynamically":[76],"define":[77],"boundary":[79],"to":[82,87,92,113],"according":[86,112],"context,":[89],"helps":[91],"protect":[93,109],"privacy":[95],"controlling":[97],"access.":[98],"Compared":[99],"with":[100],"model,":[105],"KC-RBAC":[106],"effectively":[108],"results":[115],"experiments.":[118]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}