A Consent-based Workflow System for Healthcare Systems

In this paper, we describe a new framework for healthcare systems where patients are able to control the disclosure of their medical data. In our framework, the patient's consent has a pivotal role in granting or removing access rights to subjects accessing patient's medical data. Depending on the context in which the access is being executed, different consent policies can be applied. Context is expressed in terms of workflows. The execution of a task in a given workflow carries the necessary information to infer whether the consent can be implicitly retrieved or should be explicitly requested from a patient. However, patients are always able to enforce their own decisions and withdraw consent if necessary. Additionally, the use of workflows enables us to apply the need-to-know principle. Even when the patient's consent is obtained, a subject should access medical data only if it is required by the actual situation. For example, if the subject is assigned to the execution of a medical diagnosis workflow requiring access to the patient's medical record. We also provide a complex medical case study to highlight the design principles behind our framework. Finally, the implementation of the framework is outlined

Conditions, constraints and contracts: on the use of annotations for policy modeling.

Organisational policies express constraints on generation and processing of resources. However, application domains rely on transformation processes, which are in principle orthogonal to policy specifications and domain rules and policies may evolve in a non-synchronised way. In previous papers, we have proposed annotations as a flexible way to model aspects of some policy, and showed how they could be used to impose constraints on domain configurations, how to derive application conditions on transformations, and how to annotate complex patterns. We extend the approach by: allowing domain model elements to be annotated with collections of elements, which can be collectively applied to individual resources or collections thereof; proposing an original construction to solve the problem of annotations remaining orphan , when annotated resources are consumed; introducing a notion of contract, by which a policy imposes additional pre-conditions and post-conditions on rules for deriving new resources. We discuss a concrete case study of linguistic resources, annotated with information on the licenses under which they can be used. The annotation framework allows forms of reasoning such as identifying conflicts among licenses, enforcing the presence of licenses, or ruling out some modifications of a licence configuration

Climate change: the global public good

Climate change is the exemplary global public good, because each country’s emissions of greenhouse gases contribute cumulatively to the increase of the overall concentration, and each country’s abatements entail higher cost than benefit, unless effective concerted collective actions take place. Unfortunately there are weak political and economic instruments for entering a climate agreement and for attaining and maintaining its goals. Moreover there are strong free-riding incentives since it is quite difficult - and indeed very unpopular - for governments to convince people to give up part of their current wealth for the sake of uncertain gains in the future, maybe accruing to population in remote distance. In this paper I deal with the main issues put forward by the global public good nature of climate change. Namely, I firstly shed some light on the economics of global warming in order to point out a benefit-cost framework suitable for quantifying its impacts. Then, I analyse the determinants of the provision of climate stability and the international collective action that should be undertaken to compel sovereign countries to enter into a climate agreement. Hence, after outlining the most important approach to international cooperation, I consider the possibility of a coalition formation according to the game theoretic perspective, the interests determining the participation in international agreements, and the possible sanctions imposable to countries that refuse to comply with an international climate agreement.climate change, public goods, international environmental agreements

Climate change: the global public good

Climate change is the exemplary global public good, because each country’s emissions of greenhouse gases contribute cumulatively to the increase of the overall concentration, and each country’s abatements entail higher cost than benefit, unless effective concerted collective actions take place. Unfortunately there are weak political and economic instruments for entering a climate agreement and for attaining and maintaining its goals. Moreover there are strong free-riding incentives since it is quite difficult - and indeed very unpopular - for Governments to convince people to give up part of their current wealth for the sake of uncertain gains in the future, maybe accruing to population in remote distance. In this paper I deal with the main issues put forward by the global public good nature of climate change. Namely, I firstly shed some light on the economics of global warming in order to point out a benefit-cost framework suitable for quantifying its impacts. Then, I analyse the determinants of the provision of climate stability and the international collective action that should be undertaken to compel sovereign countries to enter into a climate agreement. Hence, after outlining the most important approach to international cooperation, I consider the possibility of a coalition formation according to the game theoretic perspective, the interests determining the participation in international agreements, and the possible sanctions imposable to countries that refuse to comply with an international climate agreement.climate change, public goods, international environmental agreements

Dynamic deployment of context-aware access control policies for constrained security devices

Securing the access to a server, guaranteeing a certain level of protection over an encrypted communication channel, executing particular counter measures when attacks are detected are examples of security requirements. Such requirements are identi ed based on organizational purposes and expectations in terms of resource access and availability and also on system vulnerabilities and threats. All these requirements belong to the so-called security policy. Deploying the policy means enforcing, i.e., con guring, those security components and mechanisms so that the system behavior be nally the one speci ed by the policy. The deployment issue becomes more di cult as the growing organizational requirements and expectations generally leave behind the integration of new security functionalities in the information system: the information system will not always embed the necessary security functionalities for the proper deployment of contextual security requirements. To overcome this issue, our solution is based on a central entity approach which takes in charge unmanaged contextual requirements and dynamically redeploys the policy when context changes are detected by this central entity. We also present an improvement over the OrBAC (Organization-Based Access Control) model. Up to now, a controller based on a contextual OrBAC policy is passive, in the sense that it assumes policy evaluation triggered by access requests. Therefore, it does not allow reasoning about policy state evolution when actions occur. The modi cations introduced by our work overcome this limitation and provide a proactive version of the model by integrating concepts from action speci cation languages

Organizational Primacy after the Demise of the Organizational Career: Employment Conflict in a Post-Standard Contract World

[Excerpt] There is a contradiction at the heart of dispute resolution in the contemporary workplace. The locus of determination of the terms and conditions of employment, including processes for the resolution of disputes concerning these terms and conditions, has become increasingly decentralized to the organizational level, at the same time that long term attachment of employee careers to these same organizations has been diminishing. The result is a disconnect between the nature of current employment disputes, which increasingly involve issues relating to entry to and exit from relationships with organizations, including questions of the formation and content of employment contracts, and dispute resolution procedures that assume membership within an organizational community and acceptance of its rules and norms. In this paper, I examine these two trends in employment dispute resolution and explore the tensions between them. I begin by discussing the increase in organizational ordering of terms and conditions of employment and how it is reflected in the development of organizationally focused dispute resolution mechanisms. Then I turn to examining examples of types of growing employment conflicts that revolve around issues relating to the formation and termination of employment relationships. Following this, I conclude by discussing how dispute resolution procedures and systems might be re-envisioned to better fit a world in which standard long-term employment contracts with a single organization are no longer the paradigmatic model

Authorization Framework for the Internet-of-Things

This paper describes a framework that allows fine-grained and flexible access control to connected devices with very limited processing power and memory. We propose a set of security and performance requirements for this setting and derive an authorization framework distributing processing costs between constrained devices and less constrained back-end servers while keeping message exchanges with the constrained devices at a minimum. As a proof of concept we present performance results from a prototype implementing the device part of the framework

Prioritization of Strategies to Overcome Barriers for Cleaner and Energy Efficient Alternatives in Urban Transportation - Multi-criteria Approach

Adoption of cleaner and energy efficient technologies (CEETs) in urban transport experiences certain barriers and deriving a set of policies to remove/reduce barrier in the case of Delhi and Mumbai transport systems was attempted in this study. A set of policy alternatives and measures (PAMs) were identified for each barrier and a pool of barriers PAMs for all barriers were identified which were finally analysed for their potential based on 4 important criteria namely administrative costs, financial burden, human resource benefits, administrative backup and political acceptability. Based on aggregated multi-criteria assessment, the policy of distinct colouring scheme for alternate fuel vehicles (AFVs) stood first followed by awareness campaigns to the drivers, training programs to the workers, single window/priority check points, financial incentives and task force to carry out check. To realize the completeness, potential of PAMs in handling barriers was analysed considering not only a set of criteria but also their potential in handling more than one barrier. In overall ranking, policy to develop partnerships among major stakeholders and awareness campaigns to the drivers showed highest potential in removing barriers for the adoption of CEETs. Based on the ranking under both approaches a set of seven policy measures and alternatives were selected to remove barriers to CEETS and they are partnership between the Government, public sector undertakings and private actors in proving better infrastructure; Financial incentives like free or priority parking, separate lanes for alternative fuel vehicles and free inspection and maintenance; Task force to carry our checks; Heavy fines on defaulters; Distinct colour coding for AFVs; Demonstration of AFVs and their advantages; and Awareness campaigns to drivers. This set of PAMs would be able to control all seven pre-identified barriers to the adoption of CEETs in Delhi and Mumbai urban transportation systems.Barriers, CEETs, multi-criteria, policy analysis, urban transport