【英文标准名称】:Healthinformatics-Privilegemanagementandaccesscontrol-Part1:Overviewandpolicymanagement
【原文标准名称】:医用信息.权限管理和入口控制.第1部分:综述和政策管理
【标准号】:ISO/TS22600-1-2006
【标准状态】:现行
【国别】:国际
【发布日期】:2006-08
【实施或试行日期】:
【发布单位】:国际标准化组织(IX-ISO)
【起草单位】:ISO/TC215
【标准类型】:()
【标准水平】:()
【中文主题词】:入口控制;合格证书;计算机科学;定义;医院;主机系统;同一性试验;TI安全性;医用科学;医学科学;网络管理;资料保护;公共卫生;安全要求;安全性管理;系统管理;系统安全设计
【英文主题词】:Accesscontrols;Certificates;Computersciences;Dataprotection;Definitions;Hospitals;Hostsystems;Identitytesting;ITsecurity;Medicalinformatics;Medicalsciences;Networkmanagement;Protectionofinformation;Publichealth;Safetyrequirements;Securitymanagement;Systemmanagement;Systemsafetycontrivance
【摘要】:ThispartofISO/TS22600isintendedtosupporttheneedsofhealthcareinformationsharingacrossunaffiliatedprovidersofhealthcare,healthcareorganizations,healthinsurancecompanies,theirpatients,staffmembersandtradingpartners.Itisalsointendedtosupportinquiriesfrombothindividualsandapplicationsystems.ISO/TS22600definesmethodsformanagingauthorizationandaccesscontroltodataand/orfunctions.Itaccommodatespolicybridging.Itisbasedonaconceptualmodelwherelocalauthorizationserversandcrossborderdirectoryandpolicyrepositoryservicescanassistaccesscontrolinvariousapplications(softwarecomponents).Thepolicyrepositoryprovidesinformationonrulesforaccesstovariousapplicationfunctionsbasedonrolesandotherattributes.Thedirectoryserviceenablesidentificationoftheindividualuser.Thegrantedaccesswillbebasedonfouraspects:theauthenticatedidentificationoftheuser;therulesforaccessconnectedwithaspecificinformationobject;therulesregardingauthorizationattributeslinkedtotheuserprovidedbytheauthorizationmanager;thefunctionsofthespecificapplication.ThispartofISO/TS22600shouldbeusedinaperspectiverangingfromalocalsituationtoaregionalornationalone.Oneofthekeypointsintheseperspectivesistohaveorganizationalcriteriacombinedwithauthorizationprofilesagreeduponfromboththerequestinganddeliveringsideinawrittenpolicyagreement.ThispartofISO/TS22600supportscollaborationbetweenseveralauthorizationmanagersthatmayoperateoverorganizationalandpolicyborders.Thecollaborationisdefinedinapolicyagreement,signedbyallinvolvedorganizations,andconstitutesthebasicplatformfortheoperation.Adocumentationformatisproposed,asaplatformforthepolicyagreement,whichmakesitpossibletoobtaincomparabledocumentationfromallpartiesinvolvedintheinformationexchangeofinformation.ThispartofISO/TS22600excludesplatform-specificandimplementationdetails.Itdoesnotspecifytechnicalcommunicationsecurityservicesandprotocolsthathavebeenestablishedinotherstandards,e.g.ENV13608.Italsoexcludesauthenticationtechniques.
【中国标准分类号】:C07
【国际标准分类号】:35_240_80
【页数】:28P.;A4
【正文语种】:英语