Credential management in event-driven healthcare systems

Abstract

Health processes generate data that must be both stored and shared - often across organisational boundaries. Emerging initiatives in healthcare require the dynamic formation of care teams spanning widely-distributed, heterogeneous infrastructure. These environments suit decoupled communication paradigms such as publish/subscribe. Health information is sensitive, thus access control is critically important. This paper focuses on the management of credentials in event-driven healthcare environments. We describe the integration of credential management mechanisms with a context-sensitive data control model to provide fine-grained specification of data disclosure policy.