Role-based access control for an intranet medical practice management system with optional P2P network internet access

Abstract

Since healthcare is a sensitive field in terms of health information privacy and security, a number of security and engineering solutions have been proposed to ensure the security of medical information in a health information system. This project is a proposal for a standardized practice management system for healthcare facilities and the development of practice management software based on that system to facilitate the exchange, protection, and management of health information. The system provides a solution for the protection and security of patient information while enabling data exchange and medical staff collaboration. By implementing a restricted communications network with a role-based access control model, it reduces the risk of unauthorized data access and establishes a standard way for healthcare facilities to exchange information. The system is designed to run on multiple devices on a local network by adopting a client-server architecture, which will result in the development of two software applications, one for the server and the other one for the clients. Keywords: Access control, Role based access control, Intranet, Healthcare information system, Medical practice management system, Data protection