Abstract
The definition of authorization policies is essential to prevent information misuse and to guarantee that only authorized personnel can access specific information. Since not everyone is familiar with special purpose languages, an interpretation tool can allow the management of policies and rules using natural languages. This paper focuses on a parser developed as a component of a platform to support the care of community-dwelling older adults, the SOCIAL platform, allowing to create, read, update and delete authorization policies and rules, using natural languages.
Highlights
Health care and social care systems and platforms need to handle large quantities of care receiver’s information
The present paper purposes a natural language and policy language parser that can help anyone, even with no knowledge about specific policy languages, to create, read, update and delete rules related to authorization policies to be integrated with the Fast Healthcare Interoperability Resources (FHIR) [1], developed by Health Level Seven International (HL7), to promote interoperability across applications and systems
After the implementation of the parser using the JAVA language, an evaluation was performed. For the evaluation it was considered a scenario where it is required the possibility of sending access requests that should be verified if a set of rules was followed or not, by using both the Social Cooperation for Integrated Assisted Living (SOCIAL) platform identifying attributes and the FHIR resources attributes
Summary
Health care and social care systems and platforms need to handle large quantities of care receiver’s information Since these systems and platforms manage sensitive personal information, including clinical parameters, a major concern is related to the authorization policies, especially because interoperability with other systems and platforms must be achieved. The definition of authorization policies using special purpose policy languages may be hard to interpret and modify to those with a low technical knowledge whenever the access rules need to be updated. This means that specialized support are required to understand policy languages and to apply them, which implies additional resources. The following sections will explain available solutions for access control, the target platform for the proposed solution, the SOCIAL platform [2], and why an access control is important to fulfill its goals, the requirements for a natural language and policy language parser, its implementation and the evaluation to verify if the defined requirements are met
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have