Provisioning e-Health services: Access Control
FACPL-based Access Control System

Web Demo -->

An e-Prescription Use Case

The epSOS project defines an European e-Prescription service helps pharmacists in country B to retrieve (and properly convert) e-Prescriptions from country A; this is due to trusted actors named National Contact Points (NCPs).

eHealthCaseStudy

When a pharmacist has identified Alice, the access is requested to the NCP-B, which in its own turn contacts the NCP-A. The latter one retrieves the e-Prescriptions of the patient from the national infrastructure and, for each e-Prescription, performs through PEP-A an authorisation check against the patient informed consent. In details, PEP-A asks PDP-A to evaluate the pharmacist request with respect to the e-Prescription and the policies expressing the patient consent. Once all decisions are enforced by PEP-A, NCP-A creates the list of e-Prescriptions, by transcoding and translating them into the code system and language of the country B.

Specification of the Case Study

Constraint-Based Representation of FACPL Policies