SOA架构医疗信息系统间的跨组织访问控制模型

An inter-organizational access control model based on constraints and roles in SOA

现今医疗产业的信息系统面临着许多的挑战,例如异质性的平台、服务之间的紧密耦合以及再利用性不足等问题,近年来业界提出了以SOA架构来构建及组织医疗服务以改善目前医疗信息系统困境。针对目前在标准的SOA中缺乏访问控制的问题,本文探讨了医疗服务产业中应用SOA架构的安全性需求以及在不同医疗机构间共享服务时的访问控制问题,提出了一种SOA架构下应用于医疗领域的基于RBAC和扩充的WSDL的访问控制模型,为跨组织间的访问控制机制提供了一种新的解决方案。

Nowadays, the information system of the medical industry faces many challenges, such as the heterogeneity of the platform, the tight coupling between services and the lack of reuse. In recent years, the industry put forward the SOA archi- tecture to build and organize medical services to improve the current plight of the medical information system. Aiming at the problem of lack of access control in the standard SOA, this paper discusses the security requirements of the application of SOA architecture in the medical service industry and the access control of the shared services among different medical institutions. An access control model based on RBAC and extended WSDL in medical field is proposed under the SOA architecture. The model provides a new solution for inter-organization access control mechanism.