The Architecture and Security Model for Service-based Healthcare Information Systems

• Main Authors: Wen-Shin Hsu, 許文馨
• Other Authors: Jiann-I Pan
• Format: Others
• Language: en_US
• Published: 2014
• Online Access: http://ndltd.ncl.edu.tw/handle/26375762988505565170

博士 === 慈濟大學 === 醫學科學研究所 === 102 === Exploring healthcare system for assisting medical services or transmitting patients’ personal health information in web application has been widely investigated. Information and communication technologies have been applied to the medical services and healthcare area for a number of years to resolve problems in medical management. In the healthcare system, not all users are allowed to access all the information. Several authorization models for restricting users to access specific information at specific permissions have been proposed. However, as the number of users and the amount of information grows, the difficulties for administrating user authorization will increase. The critical problem limits the widespread usage of the healthcare system. This paper proposes an approach for role-based and extends it to deal with the information for authorizations in the healthcare system. We propose the role-based authorization model which supports authorizations for different kinds of objects, and a new authorization domain. Based on this model, we discuss the issues and requirements of security in the healthcare systems. The security issues for services shared between different healthcare industries will also be discussed. The case study is primarily focused on production of exercise prescriptions and tracking systems in SOA. The main topic of the central discussion realm: development of a theoretical basis of a service-oriented framework built on different roles and application of such structure in automatic production of exercise prescriptions as well as in identification of whether a user is granted access to the services or mechanism of information deficiency so that the quality of service can be properly managed by mutual affirmation of services.