Providing authorization interoperability using rule based HL7 RBAC for CDR (Clinical Data Repository) framework

This paper presents the idea of interoperability among users authorized roles and their authorized permissions using standard HL7 RBAC at trust domain level in a distributed healthcare environment. To provide least privileges in open distributed environment the model is context aware and enforce contextual constrains in form of rules on permission. These rules for different roles are formulated using contextual attributes define for subjects, resources, environment and session. The model is implemented using policy based access control approach. Policies are formulated for permission. A policyset define for a specific role referenced all authorizes permission policies.