Scholarlink

<p>Health care information systems leverage body area networks (BANs) to provide real-time monitoring and automated medical interventions, significantly enhancing patient care. However, security and privacy concerns present significant barriers to widespread adoption, with broken access control being a considerable risk. This research proposes an authorization framework to secure BANs, addressing critical issues, including unauthorized access and policy enforcement failures, in electronic health records (EHRs). Our study introduces a Multi-Modular System Architecture that enhances access control by incorporating a Spatio-temporal attribute-based access control (STABAC) model to enforce dynamic location- and time-based constraints for secure data access. We introduce the Spatio-temporal zone (STZone) concept, simplifying policy enforcement by integrating time and location attributes. To ensure policy integrity and security, we employ Time Colored Petri Nets (TCPN) for formal policy analysis, violation detection, and compliance with real-time constraints. Additionally, blockchain technology is leveraged to maintain policy integrity, preventing unauthorized modifications. Experimental validation demonstrates the effectiveness of the proposed framework in enforcing secure access control while maintaining system usability. The findings highlight the framework’s potential in securing BANs, offering a scalable and adaptable approach to mitigating emerging security threats in healthcare information systems. </p>

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Enforcing authorization policy in body area networks: a blockchain and smart contract-based approach for integrity assurance

  • 期刊论文

  • 出版模式：

    开放获取

  • 发表日期：

    2026年7月30日

查看全文
  • Ramadan Abdunabi,
  • Md Al Amin,
  • Rejina Basnet

摘要

Health care information systems leverage body area networks (BANs) to provide real-time monitoring and automated medical interventions, significantly enhancing patient care. However, security and privacy concerns present significant barriers to widespread adoption, with broken access control being a considerable risk. This research proposes an authorization framework to secure BANs, addressing critical issues, including unauthorized access and policy enforcement failures, in electronic health records (EHRs). Our study introduces a Multi-Modular System Architecture that enhances access control by incorporating a Spatio-temporal attribute-based access control (STABAC) model to enforce dynamic location- and time-based constraints for secure data access. We introduce the Spatio-temporal zone (STZone) concept, simplifying policy enforcement by integrating time and location attributes. To ensure policy integrity and security, we employ Time Colored Petri Nets (TCPN) for formal policy analysis, violation detection, and compliance with real-time constraints. Additionally, blockchain technology is leveraged to maintain policy integrity, preventing unauthorized modifications. Experimental validation demonstrates the effectiveness of the proposed framework in enforcing secure access control while maintaining system usability. The findings highlight the framework’s potential in securing BANs, offering a scalable and adaptable approach to mitigating emerging security threats in healthcare information systems.