Abstract
As a consequence of the epidemiological transition towards non-communicable diseases, integrated care approaches are required, not solely focused on medical purposes, but also on a range of essential activities for the maintenance of the individuals’ quality of life. In order to allow the exchange of information, these integrated approaches might be supported by digital platforms, which need to provide trustful environments and to guarantee the integrity of the information exchanged. Therefore, together with mechanisms such as authentication, logging or auditing, the definition of access control policies assumes a paramount importance. This article focuses on the development of a parser as a component of a platform to support the care of community-dwelling older adults, the SOCIAL platform, to allow the definition of access control policies and rules using natural languages.







Similar content being viewed by others
References
Rosa M, Barraca JP, Rocha (2019) access control for social care platforms using fast healthcare interoperability resources. In world conference on information systems and technologies (pp. 94-104). Springer, Cham.
Sousa M, Arieira L, Queirós A, Martins AI, Rocha NP, Augusto F, Duarte F, Neves T, Damasceno A (2018). In Advances in Intelligent Systems and Computing, 746: 1162–1168. (2018).
Baines, S., Hill, P., and Garrety, K., What happens when digital information systems are brought into health and social care? Comparing approaches to social policy in England and Australia. Social Policy and Society 13(4):569–578, 2014.
Apperta Foundation (2017) Defining an Open Platform.
Mandl, K. D., Mandel, J. C., Murphy, S. N., Bernstam, E. V., Ramoni, R. L., Kreda, D. A. et al., The SMART platform: Early experience enabling substitutable applications for electronic health records. J Am Med Informatics Assoc 19(4):597–603, 2012.
Chaballout, B. H., Shaw, R. J., and Reuter-Rice, K., The SMART healthcare solution. Advances in Precision Medicine 2(1):1–3, 2017.
Rigby, M., Integrating health and social care informatics to enable holistic health care. Stud Health Technol Inform. 177:41–51, 2012.
Kristal L Senior Care Connect Inc. [Online]. Available: https://www.seniorcareconnect.co/ (visited on 2019/06/22).
Metatheke Software: Ankira. [Online]. Available: https://ankira.pt/en/platform/ (visited on 2019/06/22).
Smith CS, Gerrish WG, Weppner WG (2015). The argument for the patient-centered medical home: Replicating good primary care. In Interprofessional Education in Patient-Centered Medical Homes (pp. 11–25). Springer, Cham.
Kendall, D., and Quill, E., A lifetime electronic health record for every American. Washington, DC: Third Way, 2015.
Bender D, Sartipi K (2013) HL7 FHIR: An Agile and RESTful approach to healthcare information exchange. In proceedings of the 26th IEEE international symposium on computer-based medical systems (pp. 326-331). IEEE.
Benson T, Grieve G (2016) Hl7 version 2. In Principles of health interoperability (pp. 223-242). Springer, Cham.
Benson T, Grieve G. (2016). Principles of health interoperability: SNOMED CT, HL7 and FHIR. Springer.
Dolin, R. H., Alschuler, L., Boyer, S., Beebe, C., Behlen, F. M., Biron, P. V., and Shabo, A., HL7 clinical document architecture, release 2. Journal of the American Medical Informatics Association 13(1):30–39, 2006.
Hoeksma J (2018) System C commits to ‘full FHIR support’ to drive interoperability. Available: https://www.digitalhealth.net/2018/09/system-c-commits-to-full-fhir-support-to-drive-interoperability/ (visited on 2019/06/22).
Chu D SocialCare. [Online]. Available: https://www.socialcare.com/ (visited on 2019/06/22).
Ayoola, I., Wetzels, M., Peters, P., van Berlo, S., and Feijs, L., Do CHANGE platform: A service-based architecture for secure aggregation and distribution of health and wellbeing data. International journal of medical informatics 117:103–111, 2018.
Alterovitz, G., Warner, J., Zhang, P., Chen, Y., Ullman-Cullere, M., Kreda, D., and Kohane, I. S., SMART on FHIR genomics: Facilitating standardized clinico-genomic apps. Journal of the American Medical Informatics Association 22(6):1173–1178, 2015.
Wagholikar, B. et al., SMART-on-FHIR implemented over i2b2. Journal of the American Medical Informatics Association 24(2):398–402, 2017.
Chronaki, CE et al. (2011) Interoperability in disaster medicine and emergency management. Journal of health informatics 3(especial): 87-99.
Pecoraro, F., Luzi, D., and Ricci, F., An integrated model to capture the provision of health and social care services based on the ContSys and FHIR standards. EJBI 13(1):17–26, 2017.
Tourani, R., Misra, S., Mick, T., and Panwar, G., Security, privacy, and access control in information-centric networking: A survey. IEEE communications surveys & tutorials 20(1):566–600, 2017.
Hu, V. C., Kuhn, D. R., Ferraiolo, D. F., and Voas, J., Attribute-based access control. Computer 48(2):85–88, 2015.
Matulevičius R (2017) Role-based access control. In fundamentals of secure system Modelling (pp. 147-169). Springer, Cham.
Elliott Bell, D., Bell–la padula model. Encyclopedia of cryptography and security:74–79, 2011.
Blake, S. Q., The Clark-Wilson security model. Library Resources: Indiana University of Pennsylvania, 2000.
Bernd Blobel, Mike Davis, Pekka Ruotsalainen (2014), Policy Management Standards Enabling Trustworthy pHealth, Proceedings of the 11th International Conference on Wearable and Implantable Body Sensor Networks.
OASIS, XACML (2013). [Online]. Available: http://docs.oasis-open.org/xacml/3.0/xacml-3.0-core-spec-os-en.html (visited on 2019/06/22).
OASIS, Security Assertion Markup Language. [Online]. Available: https://wiki.oasis- open.org/security/FrontPage (visited on 2019/06/22).
Vora J et al (2018) Ensuring privacy and security in E- health records. In international conference on computer, information and telecommunication systems (pp. 1-5) IEEE, Colmar, France.
Ray I et al (2016) Applying attribute based access control for privacy preserving health data disclosure. IEEE-EMBS international conference on biomedical and health informatics (pp. 1-4), IEEE, Las Vegas, Nevada, USA.
Atiq AM, Alsulaiman LA (2016) Using XACML to enhance compliance with privacy regulations in health sector. In 2016 world symposium on computer applications & research (WSCAR) (pp. 53-58), IEEE, Cairo, Egypt (2016).
Winter A et al. (2018). Smart medical information technology for healthcare (SMITH). Methods of information in medicine, 57(S 01): e92-e105.
Ciampi M, Esposito A, De Pietro G, Masciari E, Sicuranza M (2018) Big data and health care: A lesson learned. 2018 IEEE international conference on bioinformatics and biomedicine (BIBM), Madrid, Spain, 2018, (pp. 2068-2075). doi: https://doi.org/10.1109/BIBM.2018.8621169
Bialke, M., Bahls, T., Geidel, L., Rau, H., Blumentritt, A., Pasewald, S., Wolff, R., Steinmann, J., Bronsch, T., Bergh, B., Tremper, G., Lablans, M., Ückert, F., Lang, S., Idris, T., and Hoffmann, W., MAGIC: Once upon a time in consent management - a FHIR tale. Journal of Translational Medicine 16(1):1–11, 2018. https://doi.org/10.1186/s12967-018-1631-3.
Conley Ed, Pocs M (2018) GDPR Compliance Challenges for Interoperable Health Information Exchanges (HIEs) and Trustworthy Research Environments (TREs). European Journal for Biomedical Informatics. 14. doi https://doi.org/10.24105/ejbi.2018.14.3.7.
Turner RC (2017) Proposed model for natural language ABAC authoring. In proceedings of the 2nd ACM workshop on attribute-based access control - ABAC ‘17, (pp. 61-72), ACM, Scottsdale, Arizona, USA.
Stepien B. et al. (2014) A non-technical XACML target editor for dynamic access control systems. In 2014 international conference on collaboration technologies and systems (pp. 150-157), IEEE, Minneapolis, Minnesota, USA.
Santana, S., Dias, A., Souza, E., and Rocha, N., The domiciliary support Service in Portugal and the change of paradigm in care provision. International journal of integrated care 7(1), 2007.
Rocha, N. P., Queirós, A., Martins, A. I., Sousa, M., Arieira, L., Damasceno, A., Duarte, F., Filipe, J., and Urbauer, P., The social platform: Profiling FHIR to support community-dwelling older adults. Journal of medical systems 43(4):86, 2019.
Martins AI, Caravau H, Rosa AF, Queirós A, Rocha NP (2019). Applications to help local authorities to support community-dwelling older adults. In International Conference on Information Technology & Systems (pp. 720–729). Springer, Cham.
Acknowledgments
This work was supported by Sistema de Incentivos à Investigação e Desenvolvimento Tecnológico (SI I&DT) of the Programa Portugal 2020, through Programa Operacional Competitividade e Internacionalização and/or Programa Operacional do Centro do FEDER - Fundo Europeu de Desenvolvimento Regional, under Social Cooperation for Integrated Assisted Living (SOCIAL), project number 017861.
Author information
Authors and Affiliations
Corresponding author
Ethics declarations
This article does not contain any studies with human participants or animals performed by any of the authors.
Conflict of Interests
All the authors declare that they have no conflict of interest.
Additional information
Publisher’s Note
Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.
This article is part of the Topical Collection on Patient Facing Systems
Rights and permissions
About this article
Cite this article
Rosa, M., Barraca, J.P., Zuquete, A. et al. A Parser to Support the Definition of Access Control Policies and Rules Using Natural Languages. J Med Syst 44, 41 (2020). https://doi.org/10.1007/s10916-019-1467-2
Received:
Accepted:
Published:
DOI: https://doi.org/10.1007/s10916-019-1467-2