Towards a Zero Trust Based Hybrid Access Control Model for Medical Data

Wilcox, Colin, Welsh, Kristopher, Djahel, Soufiene, Costen, Nicholas ORCID: https://orcid.org/0000-0001-9454-8840 and Giagos, Vasileios (2024) Towards a Zero Trust Based Hybrid Access Control Model for Medical Data. In: 2024 International Conference on Information and Communication Technologies for Disaster Management (ICT-DM), 19 November 2024 - 21 November 2024, Setif, Algeria.

Preview

Accepted Version Available under License In Copyright. Download (217kB) | Preview

Abstract

This paper addresses some of the limitations of current hybrid access control models, in particular the issues surrounding managed rights inheritance, a model’s consistency and its ability to reflect changes in environment without losing integrity or flexibility. Our approach describes a layered model design which allows more or less detail to be added, in real-time, to reflect changes in the real world. The model provides time-based inherited access control following the principles of zero trust to minimise risk whilst preserving its integrity and flexibility. This paper concludes by providing a comparison of how our approach differs from traditional techniques and the areas in which improvements can be seen.