{"id":"https://openalex.org/W2075564945","doi":"https://doi.org/10.1145/2506583.2512368","title":"Enforcing Minimum Necessary Access in Healthcare Through Integrated Audit and Access Control","display_name":"Enforcing Minimum Necessary Access in Healthcare Through Integrated Audit and Access Control","publication_year":2013,"publication_date":"2013-09-22","ids":{"openalex":"https://openalex.org/W2075564945","doi":"https://doi.org/10.1145/2506583.2512368","mag":"2075564945"},"language":"en","primary_location":{"id":"doi:10.1145/2506583.2512368","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2506583.2512368","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the International Conference on Bioinformatics, Computational Biology and Biomedical Informatics","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061645618","display_name":"Paul Martin","orcid":"https://orcid.org/0000-0003-1916-864X"},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]},{"id":"https://openalex.org/I4210138172","display_name":"Institute of Information Security","ror":"https://ror.org/03rmfrm44","country_code":"JP","type":"education","lineage":["https://openalex.org/I4210138172"]}],"countries":["JP","US"],"is_corresponding":false,"raw_author_name":"Paul Martin","raw_affiliation_strings":["Information Security Institute, Johns Hopkins University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Security Institute, Johns Hopkins University","institution_ids":["https://openalex.org/I145311948","https://openalex.org/I4210138172"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111499449","display_name":"Aviel D. Rubin","orcid":"https://orcid.org/0000-0002-1061-8555"},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]},{"id":"https://openalex.org/I4210138172","display_name":"Institute of Information Security","ror":"https://ror.org/03rmfrm44","country_code":"JP","type":"education","lineage":["https://openalex.org/I4210138172"]}],"countries":["JP","US"],"is_corresponding":false,"raw_author_name":"Aviel D. Rubin","raw_affiliation_strings":["Information Security Institute, Johns Hopkins University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Security Institute, Johns Hopkins University","institution_ids":["https://openalex.org/I145311948","https://openalex.org/I4210138172"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5000402229","display_name":"Rafae Bhatti","orcid":null},"institutions":[{"id":"https://openalex.org/I4210146107","display_name":"PricewaterhouseCoopers (United States)","ror":"https://ror.org/03g75kz98","country_code":"US","type":"company","lineage":["https://openalex.org/I4210133790","https://openalex.org/I4210146107"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rafae Bhatti","raw_affiliation_strings":["PwC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"PwC, USA","institution_ids":["https://openalex.org/I4210146107"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.6536,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.91114714,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"946","last_page":"955"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9922999739646912,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10350","display_name":"Electronic Health Records Systems","score":0.9882000088691711,"subfield":{"id":"https://openalex.org/subfields/3605","display_name":"Health Information Management"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.8236268758773804},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.6829502582550049},{"id":"https://openalex.org/keywords/health-care","display_name":"Health care","score":0.6511291265487671},{"id":"https://openalex.org/keywords/suspect","display_name":"Suspect","score":0.6435152292251587},{"id":"https://openalex.org/keywords/audit-trail","display_name":"Audit trail","score":0.5975700616836548},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.5718427300453186},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5132136344909668},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.48385584354400635},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.4690476059913635},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.4138132333755493},{"id":"https://openalex.org/keywords/accounting","display_name":"Accounting","score":0.2245708405971527},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.09367799758911133}],"concepts":[{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.8236268758773804},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.6829502582550049},{"id":"https://openalex.org/C160735492","wikidata":"https://www.wikidata.org/wiki/Q31207","display_name":"Health care","level":2,"score":0.6511291265487671},{"id":"https://openalex.org/C2778223634","wikidata":"https://www.wikidata.org/wiki/Q224952","display_name":"Suspect","level":2,"score":0.6435152292251587},{"id":"https://openalex.org/C80958533","wikidata":"https://www.wikidata.org/wiki/Q1047174","display_name":"Audit trail","level":3,"score":0.5975700616836548},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.5718427300453186},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5132136344909668},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.48385584354400635},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4690476059913635},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4138132333755493},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.2245708405971527},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.09367799758911133},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2506583.2512368","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2506583.2512368","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the International Conference on Bioinformatics, Computational Biology and Biomedical Informatics","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6899999976158142,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W88725218","https://openalex.org/W107524893","https://openalex.org/W157928049","https://openalex.org/W1486300649","https://openalex.org/W1570161435","https://openalex.org/W1577844105","https://openalex.org/W1578415644","https://openalex.org/W1999514735","https://openalex.org/W2010030599","https://openalex.org/W2026231925","https://openalex.org/W2041069220","https://openalex.org/W2049452590","https://openalex.org/W2094969361","https://openalex.org/W2097141591","https://openalex.org/W2097712921","https://openalex.org/W2104644701","https://openalex.org/W2115345989","https://openalex.org/W2120269359","https://openalex.org/W2145820326","https://openalex.org/W2148952798","https://openalex.org/W2154765153","https://openalex.org/W2160245020","https://openalex.org/W2166602595","https://openalex.org/W2173213060","https://openalex.org/W2331687181","https://openalex.org/W2399165562","https://openalex.org/W2425352293","https://openalex.org/W2626643089","https://openalex.org/W3108602244","https://openalex.org/W6634506408","https://openalex.org/W6811848242"],"related_works":["https://openalex.org/W3197016913","https://openalex.org/W2389153751","https://openalex.org/W2124184151","https://openalex.org/W2750461430","https://openalex.org/W2487194309","https://openalex.org/W2948428544","https://openalex.org/W2374959091","https://openalex.org/W2088642402","https://openalex.org/W2079105056","https://openalex.org/W2020697541"],"abstract_inverted_index":{"One":[0],"of":[1,6,40,77],"the":[2,9,38,51,57,75,81],"most":[3],"important":[4],"requirements":[5],"HIPAA":[7],"is":[8,29,69],"\"minimum-necessary\"":[10],"access":[11,23],"requirement,":[12],"which":[13],"states":[14],"that":[15,62],"healthcare":[16,26],"personnel":[17],"must":[18],"be":[19],"granted":[20],"no":[21],"more":[22],"to":[24,33,37,74],"electronic":[25],"data":[27,78],"than":[28],"necessary":[30],"in":[31,80],"order":[32],"work":[34],"effectively.":[35],"Due":[36],"complexity":[39],"constructing":[41],"such":[42],"a":[43],"policy,":[44],"many":[45],"hospitals":[46],"do":[47],"not":[48],"comply":[49],"with":[50],"regulation":[52],"and":[53,71],"instead":[54],"manually":[55],"audit":[56],"logs":[58],"when":[59],"they":[60],"suspect":[61],"abuse":[63],"has":[64],"occurred.":[65],"This":[66],"audit-only":[67],"approach":[68],"error-prone":[70],"difficult":[72],"due":[73],"volume":[76],"contained":[79],"logs.":[82]},"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":1},{"year":2015,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}