2013/09/11 by Muhammad Rizwan Asghar, Asghar, Muhammad Rizwan, Giovanni Russello +1
Computer Science · Social Sciences · #Access Control and Trust #Digital Rights Management and Security #Privacy, Security, and Data Protection #cs.CY
paper · pdf · doi:10.48550/arxiv.1309.2869
The final version of this paper has been published at POLICY 2012
arxiv created 2013/09/11 · arxiv updated 2013/09/12
The notion of patient's consent plays a major role in granting access to medical data. In typical healthcare systems, consent is captured by a form that the patient has to fill in and sign. In e-Health systems, the paper-form consent is being replaced by the integration of the notion of consent in the mechanisms that regulate the access to the medical data. This helps in empowering the patient with the capability of granting and revoking consent in a more effective manner. However, the process of granting and revoking consent greatly varies according to the situation in which the patient is. Our main argument is that such a level of detail is very difficult and error-prone to capture as a set of authorisation policies. In this paper, we present ACTORS, a goal-driven approach to manage consent. The main idea behind ACTORS is to leverage the goal-driven approach of Teleo-Reactive (TR) programming for managing consent that takes into account changes regarding the domains and contexts in which the patient is providing her consent.