Affiliations: [a] Department of Computer Science and Engineering, Korea University, Seoul, Korea | [b] Department of Information Technology, The Cyber University of Korea, Seoul, Korea
Correspondence:
[*]
Corresponding authors: Jeong-Dong Kim, Department of Computer Science and Engineering, Korea
University, Seoul, Korea. E-mail: kjdvhu@gmail.com;
Doo-Kwon Baik, Department of Computer Science and Engineering, Korea University, Seoul, Korea. E-mail: baikdk@korea.ac.kr
Abstract: When sharing and storing healthcare data in a cloud
environment, access control is a central issue for preserving data privacy
as a patient's personal health data may be accessed without permission from
many stakeholders. Specifically, dynamic authorization for the access of
data is required because personal health data is stored in cloud storage via
wearable devices. Therefore, we propose a dynamic access control model for
preserving the privacy of personal healthcare data in a cloud environment.
The proposed model considers context information for dynamic access.
According to the proposed model, access control can be dynamically
determined by changing the context information; this means that even for a
subject with the same role in the cloud, access permission is defined
differently depending on the context information and access condition.
Furthermore, we experiment the ability of the proposed model to provide
correct responses by representing a dynamic access decision with real-life
personalized healthcare system scenarios.
