STRAC: Personal Information Access Control for Emergency Systems

An emergency system of sharing and exchanging user´s personal information is demanded in medical treatment and disaster situations. In such a system, personal information access control depending on user situations is greatly necessary. However, it is complicated to manage personal information access control directly, because the existing access control methods only support regular access control, not for an emergency case. In this paper, we propose a new access control model, called STRAC, which enables access control of user personal information with consideration of context changes. In our proposed model, a concept of situations is introduced. Moreover, the proposed model is based on a concept of TMAC, which is an extension of a conventional RBAC model.