CoChat
Sign Up
Cited by 21Access Control and TrustElectronic Health Records SystemsMobile Health and mHealth Applications

The DOI matches its Crossref record.

Achieving RBAC on RESTful APIs for Mobile Apps Using FHIR

Rivera Sanchez, Yaira K., Demurjian, Steven A., Baihan, Mohammed S.·2017·2017 5th IEEE International Conference on Mobile Cloud Computing, Services, and Engineering (MobileCloud)
DOI 10.1109/mobilecloud.2017.22
Open this paper in CoChat — free account

Abstract

Health Information Exchange (HIE) provides a morecomplete health record of an individual that improves patientcare with relevant data gathered from multiple healthinformation technology (HIT) systems. In support of HIE, theHealth Level Seven (HL7) XML standard was developed tomanage, exchange, integrate, and retrieve electronic healthinformation. In 2011, HL7 began drafting a next-generationstandard, Fast Healthcare Interoperable Resources (FHIR), tofacilitate the development and interaction of mobile health(mHealth) apps, HIT data sharing, and common format forinformation modeling. FHIR is based on RESTful APIs andsupported by a FHIR server infrastructure that facilitates theexchange in a cloud computing setting. FHIR while possessing asecurity specification, has yet to define and identify actualsecurity mechanisms for secure data exchange via RESTful APIcalls. In this paper, we incorporate role-based access control(RBAC) into FHIR to support the ability to control access ofwho can call which services of FHIR RESTful APIs that managesensitive healthcare data. The work is demonstrated utilizing amHealth application that communicates with the OpenEMRelectronic health record via the HAPI FHIR server.

Overview

Integrity signals

Registry

Crossref · 10.1109/mobilecloud.2017.22

Cites

Statistics

Recomputing p-values needs the paper’s full text.

Verification

Claims the paper makes

We couldn’t retrieve this paper’s full text, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Citations

Cites

No references could be resolved yet.

Research works printed but not linked: 28

  1. rivera sánchez, 2016, Chapter 6: An Approach for Role-Based Access Control in Mobile Applications, IGI Global
  2. 2014, HAPI
  3. 2002, OpenEMR
  4. lamprinakos, 2014, Using FHIR to develop a healthcare mobile application, 132
  5. franz, 2015, Applying FHIR in an integrated health monitoring system, EJBI 2015, 11, 51
  6. altamimi, 2016, SecFHIR: A security specification model for Fast Healthcare Interoperability Resources, International Journal of Advanced Computer Science and Applications (IJACSA), 7
  7. ferraiolo, 1992, Role-Based Access Control, Proc NIST-NSA Computer Security Conf, 554
  8. 10.1109/MITP.2013.37 · DOI
  9. 2015, Guide to resources
  10. 2015, Resource Index
  11. 2015, Introduction to JSON Web Tokens
  12. 2011, Health Level Seven International
  13. 2013, The Postman
  14. 2015, 2015 Edition Health Information Technology Certification Criteria 2015 Edition Base Electronic Health Record Definition and ONC Health IT Certification Program Modifications
  15. 2016, FHIR security
  16. 2012, Digital Imaging and Communications in Medicine
  17. 10.1109/35.312842 · DOI
  18. 10.1145/257874.257896 · DOI
  19. 10.1377/hlthaff.w5.10 · DOI · Paper page
  20. rivera sánchez, 2016, Chapter 6: User Authentication Requirements for Mobile Computing, Handbook of Research on Innovations in Access Control and Management IGI Global
  21. heisey-grove, 2015, Any certified and basic Quantifying Physician EHR adoption through 2014
  22. 2007, Latest SOAP versions
  23. 2015, Swift-SMART
  24. 2013, Java Servlet Technology
  25. 2016, Server Interceptors
  26. 2015, Open source FHIR implementations
  27. 2015, Substitute for raised H B No 6722
  28. 2016, Server Security

Cited by

Metadata

Authors
Rivera Sanchez, Y. K., Demurjian, S. A., & Baihan, M. S.
Affiliations
University of Connecticut (US)
Venue
2017 5th IEEE International Conference on Mobile Cloud Computing, Services, and Engineering (MobileCloud)
Publisher
IEEE
Published
2017-04
Pages
139-144
DOI
10.1109/mobilecloud.2017.22
OpenAlex
W2626036098
Cited by
21
References
0
Citations by year
2025: 2 · 2024: 1 · 2023: 4 · 2022: 4 · 2021: 3 · 2019: 1 · 2018: 5 · 2017: 1
FWCI
6.09
Type
conference paper
Language
en
Open access
closed
Locations
IEEE International Conference on Mobile Cloud Computing, Services, and Engineering (MobileCloud) (publishedVersion)
Topics
  • Physical Sciences › Computer Science › Computer Networks and Communications › Access Control and Trust
  • Health Sciences › Health Professions › Health Information Management › Electronic Health Records Systems
  • Health Sciences › Health Professions › General Health Professions › Mobile Health and mHealth Applications
Keywords
role-based access control, FHIR, REST API, mobile health apps, health information exchange, healthcare data security, OpenEMR, electronic health records, HL7, access control

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review