FINAL INTERNATIONAL ISO/FDIS DRAFT STANDARD 22600-2 ISO/TC215 Health informatics Privilege Secretariat: ANSI management and access control - Voting begins on: 2014-02-20 Part 2: Voting terminates on: Formal models 2014-04-20 Informatique de santé - Gestion de privileges et controle d'acces - Partie2:Modelesformels SUBMIT, WITH THEIR COMMENTS, NOTIFICATION OF ANY RELEVANT PATENT RIGHTS OF WHICH THEY ARE AWARE AND TO PROVIDE SUPPORTING DOCUMENTATION INADDITIONTOTHEIREVALUATIONAS Reference number BEING ACCEPTABLE FOR INDUSTRIAL, TECHNO- LOGICAL, COMMERCIAL AND USER PURPOSES, ISO/FDIS 22600-2:2014(E) DRAFT INTERNATIONAL STANDARDS MAY ON ISO OCCASION HAVE TO BE CONSIDERED IN THE DARDS TO WHICH REFERENCE MAY BE MADE IN @IS02014 by IHS underI license from IHS Not for Resale IS0/FDIS 22600-2:2014(E) COPYRIGHTPROTECTEDDOCUMENT @ IS0 2014 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form written permission. Permission can be requested from either ISO at the address below or ISO's member body in the country of the requester. ISOcopyrightoffice Case postale 56:CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax +4122 749 09 47 E-mail [email protected] Web www.iso.org Published in Switzerland @ IS0 2014 - All rights reserved No reproductic networking permitted without license from IHS Not for Resale IS0/FDIS 22600-2:2014(E) Contents Page Foreword ..iv Introduction. ..V 1 Scope. ..1 2 Normative references 3 Terms and definitions 4 Abbreviated terms 5 Component paradigm .6 6 Generic models. ..7 6.1 Framework .7 6.2 Domain model ..8 6.3 Document model .10 6.4 Policy model .10 6.5 Role model .14 6.6 Authorization model . Role and privilege assignment .14 6.7 Control model .15 6.8 Delegation model 16 6.9 Access control model .18 Annex A (informative) Functional and structural roles .20 Bibliography .25 iii ded by IHS under lic ense with ISt ed without license from IHS Not for Resale