Adaptive Context and Trust Aware Access Control Mechanism for Personal Health Record in Ubiquitous Environment

In the ubiquitous world, Personal health record (PHR) is shared with authorized entity in a patient-centric health records exchange model. However, due to privacy concerns, access control over PHR is achieved through authentication techniques. But, scalability, flexible access, context-aware and efficient user withdrawal have remained the most significant challenges for control over the PHR data access. In this paper, a health record access framework is proposed for PHR access. The adoption of context based three-factor authentication techniques achieves scalable and fine-grained PHR access control. The proposed scheme allows dynamic variation of access policies to support efficient on-demand access under non-emergency and emergency scenarios.