An Authorization Policy Management Framework for Dynamic Medical Data Sharing

To offer the best possible care for their patients, family physicians need coordinated data obtained from the physicians own patient database, from other physicians database, pharmacies, and drug reference databases. P2P-based sharing systems have been actively researched to enable resource sharing between multiple heterogeneous healthcare enterprises. Unfortunately, P2P system introduces a whole new class of privacy and security threats and in order to enable resource sharing between multiple heterogeneous healthcare enterprises, a policy management framework is required. To solve these problems in a loose-coupling way, we propose a dynamic, distributed and heterogeneous policy management framework for sharing medical information among autonomous and disparate healthcare information systems.