An Access Control System for Home Based Healthcare Information Sharing using Smart Gateway

摘要

As a result of the graying population, home-basedhealthcare services has seen a rapid demand over the pastdecade. Home based care and nursing services are a jointservice involving a broad range of healthcare servicesprovided by several other individuals and organizations.Mobile computing devices such as smartphones andtablets have been widely recognized as a means forintegrating disparate data and computing resources in thepervasive mobile healthcare field. Moreover, mobiledevices provide a platform to develop applications onwireless infrastructure to execute healthcare process thatin turn can provide remote access to healthcareinformation exchange services. Such an environmentprovides ubiquitous and universal access to resources atthe point of care, thus improving healthcare quality. Insuch conditions the ability to provide effective accesscontrol environment to ensure the security and privacy ofhealthcare information are essential [1]. However,traditional authentication scheme adopted in mobiledevices such as passwords, digital certificates, securetokens and biometrics. mainly focus at only user entrypointauthentication, which may not suit dynamichealthcare environments. We propose an experimentaldesign of a certificate based context-aware access controlmethod to be used by caregivers and physicians withmobile devices in home-based healthcare environments.In our proposed system, whenever a user visits a patient'shome, a gateway authenticates the user's device usingcertificates and collects context data used for authorizingaccess to preliminary services using the PKI-based smartcard. For accurate context evaluation, the gatewayservice collects context data and generates certificatecredential based on the received context data such asGPS data and user device MAC address for verificationand trust assessment of the authenticated user’s device.