Flexible Access to Patient Data through e-Consent

Abstract

The advances in healthcare and information technology are shifting more and more the ownership of data from medical institutions and doctors to individual citizens. However, since the medical information of an individual is condential, the only basis for sharing it, is through prior informed consent which will regulate access to his private healthcare data. This paper highlights challenges investigated in three EU research projects and presents a solution utilizing novel access control mechanisms to ensure the selective exposure of the patients' sensitive information thereby empowering them. Our solution can eciently support the entire life-cycle of consent such as withdrawal, activation, deletion or update. Moreover it responds to complex and dierent scenarios in which the patient can dene complicated and dynamic access control policies at dierent granularity levels. In this paper we propose a Personal Health Record (PHR) system, accessible through desktop and mobile devices, that explores the ecient access regulation to information according to the consent forms provided by the patients.