Location-based security framework for use of handheld devices in medical information systems

Abstract

The paper presents a spatial role-based access control (SRBAC) framework and its application to healthcare information systems that allow wireless access to information. The framework secures access to medical information and resources accessible through mobile computing devices by healthcare personal and patients. The framework utilizes location information in access control decisions, in order to determine the permissions a role encompass at a given location. The permissions of a role are changing dynamically depending of role owner movement