Blockchain-Enabled Next Generation Access Control
dc.contributor.author | Dong, Yibin | en |
dc.contributor.author | Mun, Seong K. | en |
dc.contributor.author | Wang, Yue | en |
dc.date.accessioned | 2022-02-19T20:04:32Z | en |
dc.date.available | 2022-02-19T20:04:32Z | en |
dc.date.issued | 2022-01-01 | en |
dc.date.updated | 2022-02-19T20:04:29Z | en |
dc.description.abstract | In the past two decades, longitudinal personal health record (LPHR) adoption rate has been low in the United States. Patients’ privacy and security concerns was the primary negative factor impacting LPHR adoption. Patients desire to control the privacy of their own LPHR in multiple information systems at various facilities. However, little is known how to model and construct a scalable and interoperable LPHR with patient-controlled privacy and confidentiality that preserves patients’ health information integrity and availability. Understanding this problem and proposing a practical solution are considered important to increase LPHR adoption rate and improve the efficiency as well as the quality of care. Even though having the state-of-the-art encryption methodologies being applied to patients’ data, without a set of secure access control policies being implemented, LPHR patient data privacy is not guaranteed due to insider threats. We proposed a definition of “secure LPHR” and argued LPHR is secure when the security and privacy requirements are fulfilled through adopting an access control security model. In searching for an access control model, we enhanced the National Institute of Standards and Technology (NIST) next generation access control (NGAC) model by replacing the centralized access control policy database with a permissioned blockchain peer-to-peer database, which not only eases the race condition in NGAC, but also provides patient-managed access control policy update capability. We proposed a novel blockchain-enabled next generation access control (BeNGAC) model to protect security and privacy of LPHR. We sketched BeNGAC and LPHR architectures and identified limitations of the design. | en |
dc.description.version | Published version | en |
dc.format.extent | Pages 319-328 | en |
dc.format.mimetype | application/pdf | en |
dc.identifier.doi | https://doi.org/10.1007/978-3-030-86162-9_32 | en |
dc.identifier.eissn | 2367-3389 | en |
dc.identifier.isbn | 9783030861612 | en |
dc.identifier.issn | 2367-3370 | en |
dc.identifier.orcid | Mun, Seong [0000-0001-9661-7918] | en |
dc.identifier.orcid | Wang, Yue [0000-0002-1788-1102] | en |
dc.identifier.uri | http://hdl.handle.net/10919/108766 | en |
dc.identifier.volume | 320 LNNS | en |
dc.language.iso | en | en |
dc.publisher | Springer | en |
dc.rights | In Copyright | en |
dc.rights.uri | http://rightsstatements.org/vocab/InC/1.0/ | en |
dc.title | Blockchain-Enabled Next Generation Access Control | en |
dc.title.serial | Lecture Notes in Networks and Systems | en |
dc.type | Conference proceeding | en |
dc.type.dcmitype | Text | en |
dc.type.other | Conference Proceeding | en |
pubs.organisational-group | /Virginia Tech | en |
pubs.organisational-group | /Virginia Tech/Science | en |
pubs.organisational-group | /Virginia Tech/Science/Physics | en |
pubs.organisational-group | /Virginia Tech/Engineering | en |
pubs.organisational-group | /Virginia Tech/Engineering/Electrical and Computer Engineering | en |
pubs.organisational-group | /Virginia Tech/Faculty of Health Sciences | en |
pubs.organisational-group | /Virginia Tech/All T&R Faculty | en |
pubs.organisational-group | /Virginia Tech/Engineering/COE T&R Faculty | en |
pubs.organisational-group | /Virginia Tech/Science/COS T&R Faculty | en |
Files
Original bundle
1 - 1 of 1
Loading...
- Name:
- Dong_Y_Blockchain21_BeNGAC_v10.pdf
- Size:
- 396.8 KB
- Format:
- Adobe Portable Document Format
- Description:
- Published version