DIN Standards Committee Information Technology and IT Applications
DIN EN ISO 22600-2
Health informatics - Privilege management and access control - Part 2: Formal models (ISO 22600-2:2014); German version EN ISO 22600-2:2014
Medizinische Informatik - Privilegienmanagement und Zugriffssteuerung - Teil 2: Formale Modelle (ISO 22600-2:2014); Deutsche Fassung EN ISO 22600-2:2014
Overview
This multi-part International Standard defines principles and specifies services needed for managing privileges and access control to data and functions. It focuses on the communication and use of health related information distributed across policy domain boundaries. This includes healthcare information sharing across unaffiliated providers of healthcare and healthcare organizations, health insurance companies, their patients, staff members, and trading partners by both individuals and application systems ranging from a local situation to a regional or even national situation. It specifies the necessary component-based concepts and is intended to support their technical implementation. It does not specify the use of these concepts in particular clinical process pathways. This part of ISO 22600-2 introduces the underlying paradigm of formal high-level models for architectural components. It is based on ISO/IEC 10746 and introduces the domain model, the document model, the policy model, the role model, the authorization model, the delegation model, the control model, and the access control model. The specifications are provided using the meta-languages Unified Modelling Language (UML) and Extensible Markup Language (XML). Additional diagrams are used for explaining the principles. The attributes used have been referenced to the HL7 reference information model (ISO 21731:2006) and the HL7 data type definitions. The role model has been roughly introduced referring to ISO 21298. This standard contains the German translation of ISO 22600-3:2014 which has been prepared by Technical Committee CEN/TC 251 "Medical Informatics", the secretariat of which is held by NEN (the Netherlands) in collaboration with Technical Committee ISO/TC 215 "Health Informatics" with the participation of German experts. The responsible body at the national level is DIN Standards Committee Medicine, Working Committee NA 063-07-04 AA "Sicherheit" ("Security").
