Identity, access and privacy across care organisations
First-authored PICASO security architecture paper, ICCST 2018
Reference note by Armanas Povilionis-Muradian
On this page
Original work
Identity Management, Access Control and Privacy in Integrated Care Platforms: The PICASO Project
- Type & status
- Conference paper · Published
- Published
- Authors
- Armanas Povilionis; Franco Arcieri; Maurizio Talamo; Indirajith Viji Ananth; Christian H. Schunck; Peter Rosengren; Jesper Thestrup; Jutta G. Richter; Agostino Chiaravalotti; Orazio Schillaci; Henrike Gappa; Carlos Velasco
- Venue
- 2018 International Carnahan Conference on Security Technology (ICCST), pp. 1-5
- DOI
- 10.1109/ccst.2018.8585716
At a glance
The PICASO security architecture coordinated identity, consent and access policies across independently operated healthcare systems.
I was first author of this 2018 ICCST paper. It describes the security, privacy and trust architecture supporting PICASO’s exchange of health records and care plans across organisations.
Patients, clinicians and institutions bring different responsibilities and policies. The architecture used a distributed validation authority, DIVA, alongside access managers deployed at participating systems. It handled authentication, access-token distribution, policy enforcement and transaction documentation.
Consent settings and institutional rules governed access. Metadata monitoring and transaction logs supported traceability while internal institutional activity remained private. Agreements identified clinical partners as data controllers and technical partners as processors.
The contribution is a distributed health-data governance architecture. Extensions involving blockchain policy distribution and rare-event verification remained future work.
Original publication: Armanas Povilionis, Franco Arcieri, Maurizio Talamo, Indirajith Viji Ananth, Christian H. Schunck, Peter Rosengren, Jesper Thestrup, Jutta G. Richter, Agostino Chiaravalotti, Orazio Schillaci, Henrike Gappa and Carlos Velasco. “Identity Management, Access Control and Privacy in Integrated Care Platforms: The PICASO Project.” 2018 International Carnahan Conference on Security Technology (ICCST), pp. 1–5 (2018). DOI: 10.1109/CCST.2018.8585716.