Requirements for Access Control: US Healthcare Domain

Roles are important factors in authorization rules. However, other information is essential in order to make authorization decisions at healthcare enterprises. An effective authorization language that would incorporate concepts of roles, a liation, location, relationships and time is needed.