Enhancing Health Information Systems Security: An Ontology Model Approach

Abstract

This study explores the implications of integrating Health Information System (HIS) on the security and privacy of sensitive patient information. It identifies existing gaps in research and proposes a novel security ontology model aimed at strengthening the defence of health information systems. The model revolves around the Ontology Conceptual Security Model, which comprehensively captures the intricate relationships between different components of HIS security. By incorporating elements such as Health Information, HIS Security Conditions, and Semantic Web Rule Language (SWRL) rules, the model promotes the establishment of rule-based access policies. It effectively combines various access control strategies, including Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and Mandatory Access Control (MAC). This integration ensures both flexibility and compliance with regulatory requirements. While the model represents a significant advancement in the field, it recognizes the need for further validation and addresses future challenges. Specifically, it highlights the importance of exploring advanced access control mechanisms and seamless integration with existing systems. In essence, this study presents a comprehensive framework for a robust security ontology model designed to enhance the protection of patient data within HIS systems.