Search

The integration and evolution of existing systems represents one of the most urgent priorities of health care information systems in order to allow the whole organisation to meet the increasing clinical organisational and managerial needs. The CEN ENV 12967-1 'Healthcare Information Systems Architecture'(HISA) standard defines an architectural approach based on a middleware of business-specific common services, enabling all parts of the local and geographical system to operate on the common information heritage of the organisation and on exploiting a set of common business-oriented functionality. After an overview on the key aspects of HISA, this paper discusses the positioning of the authorization and security aspects in the overall architecture. A global security framework is finally proposed.

This paper provides a summary of the approach adopted by EDITH for the definition and management of the security aspects within a generic healthcare information system, organised according to a common architecture based on characteristics of modularity, openness and federation of the individual healthcare organisations and healthcare information systems. The specification and actual development of the Authorisation Server, shortly described in this paper, is the result of the joining of the activities carried out by GESI in the frame of the NUCLEUS (AIM 2025) and EDITH-Italy (ESPRIT 7058) projects.