A User-oriented Access Control Model for Medical Association Cloud Platform

Cloud computing has become a research focus in the area of health informationization, due to the rapid development of cloud computing technology and medical and health informationization. The key to the growth of medical and health informationization is the data security and privacy protection of medical resources. This paper, in light with the features of cloud computing and medical resources, proposed an access control model that is applied on the medical association cloud platform. Being improved on the basis of RBAC model, the model in this paper determines the credit grade of a user according to his behavior to do dynamic role authorization and it also supports the resource owner to makea personal access policy. This model diminishes the potential security risk brought by the separation between medical resource owners and users and lowers the risk of unauthorized access by invalid users.