Towards a Zero Trust Based Hybrid Access Control Model for Medical Data

This paper addresses some of the limitations of current hybrid access control models, in particular the issues surrounding managed rights inheritance, a model’s consistency and its ability to reflect changes in environment without losing integrity or flexibility. Our approach describes a layered model design which allows more or less detail to be added, in real-time, to reflect changes in the real world. The model provides time-based inherited access control following the principles of zero trust to minimise risk whilst preserving its integrity and flexibility. This paper concludes by providing a comparison of how our approach differs from traditional techniques and the areas in which improvements can be seen.