ISO/TS 22600-1:2006
医用信息.权限管理和入口控制.第1部分:综述和政策管理

Health informatics - Privilege management and access control - Part 1: Overview and policy management

作废

非常抱歉，我们暂时无法提供预览，您可以试试： 免费下载 ISO/TS 22600-1:2006 前三页，或者稍后再访问。

您也可以尝试购买此标准，
点击右侧 “购买” 按钮开始采购（由第三方提供）。

注意： 点击下载后，生成下载文件时间比较长，请耐心等待......

标准号

ISO/TS 22600-1:2006

发布

2006年

发布单位

国际标准化组织

当前最新

ISO/TS 22600-1:2006

 

 

适用范围

This part of ISO/TS 22600 is intended to support the needs of healthcare information sharing across unaffiliated providers of healthcare, healthcare organizations, health insurance companies, their patients, staff members and trading partners. It is also intended to support inquiries from both individuals and application systems. ISO/TS 22600 defines methods for managing authorization and access control to data and/or functions. It accommodates policy bridging. It is based on a conceptual model where local authorization servers and crossborder directory and policy repository services can assist access control in various applications (software components). The policy repository provides information on rules for access to various application functions based on roles and other attributes. The directory service enables identification of the individual user. The granted access will be based on four aspects: the authenticated identification of the user; the rules for access connected with a specific information object; the rules regarding authorization attributes linked to the user provided by the authorization manager; the functions of the specific application. This part of ISO/TS 22600 should be used in a perspective ranging from a local situation to a regional or national one. One of the key points in these perspectives is to have organizational criteria combined with authorization profiles agreed upon from both the requesting and delivering side in a written policy agreement. This part of ISO/TS 22600 supports collaboration between several authorization managers that may operate over organizational and policy borders. The collaboration is defined in a policy agreement, signed by all involved organizations, and constitutes the basic platform for the operation. A documentation format is proposed, as a platform for the policy agreement, which makes it possible to obtain comparable documentation from all parties involved in the information exchange of information. This part of ISO/TS 22600 excludes platform-specific and implementation details. It does not specify technical communication security services and protocols that have been established in other standards, e.g. ENV 13608. It also excludes authentication techniques.

ISO/TS 22600-1:2006相似标准

推荐

谁引用了ISO/TS 22600-1:2006 更多引用