Application of a multilevel access model in the development of a security infrastructure for a clinical information system.
A number of security models including the military model, the Institute of Medicine model, and the matrix model have been utilized, or proposed, for protecting clinical information systems. These models have a number of limitations, however, and of particular concern, they focus on security as opposed to access. In this paper we describe a multilevel access model which can overcome some of these limitations. This model is currently being utilized in the development of an improved security infrastructure for a clinical information system.