Access and usage control requirements for patient controlled record type of healthcare information system Rath, Thavy Mony Annanda; Colin, Jean-Noël  Copyright and moral rights for the publications made accessible in the public portal are retained by the authors and/or other copyright owners and it is a condition of accessing publications that users recognise and abide by the legal requirements associated with these rights. • Users may download and print one copy of any publication from the public portal for the purpose of private study or research. • You may not further distribute the material or use it for any profit-making activity or commercial gain • You may freely distribute the URL identifying the publication in the public portal ? If you believe that this document breaches copyright please contact us providing details, and we will remove access to the work immediately and investigate your claim. This paper addresses the issue of access and usage control requirements in healthcare information system. Our work aims at identifying the access and usage control requirements for a particular healthcare information system where patients have pivotal right to grant or deny access to their health records. We term this system "Patient Controlled Record type of Healthcare Information System or PCRHIS". It is worth noting that the requirements, presented in this paper, are the results of our studies from both user's requirements and legal issues (based on 95/46/EC Directive ) under the scope of Walloon Healthcare Network (WHN). The WHN project aims at providing an electronic healthcare facility for patients in Walloon region, Belgium, that joins all healthcare institutions, clinics, and physicians and allows sharing of patients' health records when needed. The main contribution of this work is that, with these requirements as a reference, one can identify an appropriate access and usage control model. This applies not only to the proposed system under the scope of WHN project but also to any system that has similar model.
REF defined the access and usage control requirements for a particular healthcare information system where patients have pivotal right to grant or deny access to their health records.
Access and Usage Control Requirements for Patient Controlled Record Type of Healthcare Information System
HEALTHINF
Computer Science