The Use of Role Based Access Control
in Health Care Information Security

Contents:

• Project Description
• Demonstration of Patient Information Access
• Paper from the 2'ed Annual CHIN Summit 1995
  • HTML
  • Postscript
• RBAC and Object Technology
• NIST CSL Bulletin on RBAC
• Project Final Report (NISTIR 5820)

Abstract

This project determines the applicability of Role Based Access Control (RBAC) to health care information. While it is generally accepted that RBAC is more suited to health care that others, the question remains as to whether RBAC meets all of the requirements for the security of health care information. Moreover, there are several variations on the RBAC model and there is the question of which variations are most suitable for health care information.

Contact: John Barkley - barkley@sst.ncsl.nist.gov, (301) 975-3346