Supporting E-consent on health data by logic

Abstract

In our previous work, we have developed a Delegatable Authorization Program (DAP) to support delegatable authorizations, where negation as failure, classical negation and rules inheritance are all allowable. In particular, a conflict resolution policy has been proposed which can support the controlled delegation and exception. This paper discusses an application of DAP in health care: electronic consent (e-consent). It examines a range of types of e-consent and shows how our proposed authorization models can well support these e-consent models. We will use DAP to develop a means of representing and evaluating patient consent to the disclosure of their data, with particular emphasis on security.