An Event Driven Hybrid Identity Management Approach to Privacy Enhanced e-Health
| Autor: | Andrés Marín, Florina Almenarez, Fabio Sanvido, Patricia Arias, Daniel Diaz-Sanchez, Rosa Sanchez-Guerrero |
|---|---|
| Jazyk: | angličtina |
| Rok vydání: | 2012 |
| Předmět: |
Patient Identification Systems
Engineering Medical Records Systems Computerized Medicina media_common.quotation_subject user-centric event revocation consent identity management Computer security computer.software_genre lcsh:Chemical technology privacy Biochemistry Article Identity management Analytical Chemistry federation Humans Overhead (computing) lcsh:TP1-1185 Electrical and Electronic Engineering Federation Instrumentation theory queue User-centered design media_common Event Flexibility (engineering) Motivation delegation Delegation Revocation business.industry Event (computing) Health care Revocation consent Credential health care Atomic and Molecular Physics and Optics User-centric Theory queue Privacy business computer |
| Zdroj: | Sensors Volume 12 Issue 5 Pages 6129-6154 Sensors, Vol 12, Iss 5, Pp 6129-6154 (2012) e-Archivo. Repositorio Institucional de la Universidad Carlos III de Madrid instname Sensors (Basel, Switzerland) |
| ISSN: | 1424-8220 |
| DOI: | 10.3390/s120506129 |
| Popis: | Credential-based authorization offers interesting advantages for ubiquitous scenarios involving limited devices such as sensors and personal mobile equipment: the verification can be done locally it offers a more reduced computational cost than its competitors for issuing, storing, and verification and it naturally supports rights delegation. The main drawback is the revocation of rights. Revocation requires handling potentially large revocation lists, or using protocols to check the revocation status, bringing extra communication costs not acceptable for sensors and other limited devices. Moreover, the effective revocation consent—considered as a privacy rule in sensitive scenarios—has not been fully addressed.This paper proposes an event-based mechanism empowering a new concept, the sleepyhead credentials, which allows to substitute time constraints and explicit revocation by activating and deactivating authorization rights according to events. Our approach is to integrate this concept in IdM systems in a hybrid model supporting delegation, which can be an interesting alternative for scenarios where revocation of consent and user privacy are critical. The delegation includes a SAML compliant protocol, which we have validated through a proof-of-concept implementation. This article also explains the mathematical model describing the event-based model and offers estimations of the overhead introduced by the system. The paper focus on health care scenarios, where we show the flexibility of the proposed event-based user consent revocation mechanism. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|