A context-aware, capability-based, role-centric access control model for IoMT

Abstract

The Internet of Medical Things (IoMT) can be described as connecting everyday devices and wearables to the Internet in order to intelligently link them together, thus enabling new forms of communication between things (medical devices) and people (patients) and between things themselves. This paper describes a context-aware access control model that hinges on the role-based and attribute-based access control (RABAC) and the capability-based access control (CapBAC) models. A prototype access control mechanism based on the model is intended to be incorporated into a personal health record (PHR) platform.