Access Control » History » Version 9
Suravi Regmi, 11/25/2025 06:16 PM
| 1 | 1 | Suravi Regmi | # Access Control + Policy Structure |
|---|---|---|---|
| 2 | |||
| 3 | 6 | Suravi Regmi | ## Access Control |
| 4 | 7 | Suravi Regmi |  |
| 5 | 6 | Suravi Regmi | --- |
| 6 | |||
| 7 | ## Policy |
||
| 8 | 1 | Suravi Regmi | Goal: limit data access to only authorized users based on terms of use and privacy risks |
| 9 | Default access: Data owner |
||
| 10 | 8 | Suravi Regmi | |
| 11 | WHO : the requester is (e.g. Adam) |
||
| 12 | WHAT: data is requested (e.g. ecg, glucometer) |
||
| 13 | WHERE : the data was recorded (e.g. gym) |
||
| 14 | WHEN: the data was generated (e.g. after 04/04/2023) |
||
| 15 |  |
||
| 16 | 7 | Suravi Regmi | |
| 17 | 6 | Suravi Regmi | |
| 18 | 9 | Suravi Regmi | Time-Based Enhancement Enables policies like " **Adam may access data generated from November 1, 2024 to April 1, 2025** ”. Dates need to be converted to unix timestamp before usage with the system. |
| 19 | 1 | Suravi Regmi | |
| 20 | 2 | Suravi Regmi | --- |