Access Control Models – A Systematic Review

Within a healthcare environment, organizational, legal, functional, social, ethical, and technical requirements must be met. In that context, security and safety are important challenges, which highly influence user acceptance. In such a complex scenario, privilege management and access control are critical for data security and patients' privacy. On the other end, the appropriate use of care data should not be prevented by data protection measures. In order to enable an adequate use of data, all the policies ruling the care process must be harmonized. In order to pursue this aim, the health system's architecture must be formally described at the required level of granularity using a system theory based architectural model. The resulting representation can be used as a mean to compare the different access control models governing the different parts of the distributed environment and to perform policy harmonization