Evidence map›Paper›PMID 21277996›Full record

ArticleJournal of biomedical informatics2011

Learning relational policies from electronic health record access logs.

Bradley Malin, Steve Nyemba, John Paulett

Abstract read
In one paragraph

Article in Journal of biomedical informatics, 2011. The graph could read no effect estimate from its abstract, so it casts no vote on the map. Cited by 21 papers, 2 of them syntheses that pooled it.

0numbers the graph read from it
0cells of the map it votes in
21citing papers in PubMed, 2 pooled it
–field-weighted citation impact
1 · What the graph read from it

What it found

Each row is one number read from the abstract, on the scale the paper reported it, with its interval. Left of the dashed line favours the treatment, right favours the comparator. Under each row is the sentence it came from. New to these charts? A ten-minute tutorial.

The abstract states no effect estimate the extractor could read, or names no intervention and outcome on the map, so this paper lights no cell and moves no belief. It is still indexed, cited and linked below.

2 · The registry

The trial behind it

Trials whose registry record cites this paper, or whose number appears in the abstract. A trial that started after this paper was published is citing it as background, not reporting it.

Neither the registry nor the abstract names a trial number. If this is a trial report, that itself is worth knowing.

3 · Its place in the literature

Who cites it

21 citing papers in PubMed, 2 syntheses or guidelines pooled it.

  1. Pooled it
  2. Applications of network analysis to routinely collected health care data: a systematic review.Journal of the American Medical Informatics Association : JAMIA · 2018
    Pooled it
  3. Trial
  4. Article
  5. Article
  6. Article
  7. Evaluating the Effectiveness of Auditing Rules for Electronic Health Record Systems.AMIA ... Annual Symposium proceedings. AMIA Symposium · 2017
    Article
  8. Article
  9. "Big data" and the electronic health record.Yearbook of medical informatics · 2014
    Review
  10. Article
  11. Article
  12. Explaining accesses to electronic medical records using diagnosis information.Journal of the American Medical Informatics Association : JAMIA · 2013
    Article
  13. Article
  14. Detecting Anomalous Insiders in Collaborative Information Systems.IEEE transactions on dependable and secure computing · 2012
    Article
  15. Article
  16. Auditing medical records accesses via healthcare interaction networks.AMIA ... Annual Symposium proceedings. AMIA Symposium · 2012
    Article
  17. Leveraging Social Networks to Detect Anomalous Insider Actions in Collaborative Environments.ISI ... : ... IEEE Intelligence and Security Informatics. IEEE International Conference on Intelligence and Security Informatics · 2011
    Article
  18. Towards Understanding the Usage Pattern of Web-based Electronic Medical Record Systems.World of wireless mobile and multimedia networks. IEEE International Symposium on a World of Wireless Mobile and Multimedia Networks · 2011
    Article
  19. Article
  20. Context-Aware Anomaly Detection for Electronic Medical Record Systems.HealthSec ... : ... USENIX workshop on health security and privacy. USENIX Workshop on Health Security and Privacy · 2011
    Article
4 · The record

Corrections and comments

PubMed lists nothing against this paper. Absence here is not a guarantee, only a check that was made.

5 · Who and what money

Authors and funding

3 authors.

Bradley MalinDepartment of Biomedical Informatics, School of Medicine, Vanderbilt University, Nashville, TN 37203, USA. b.malin@vanderbilt.edu
Steve Nyemba
John Paulett

Funding

Automated Detection of Anomalous Accesses to Electronic Health RecordsR01LM010207 · NLM · VANDERBILT UNIVERSITY MEDICAL CENTER · PI MALIN, BRADLEY A. · 2009 to 2017
$2.4M
NLM NIH HHS R01 LM010207
6 · The paper itself

Abstract

Modern healthcare organizations (HCOs) are composed of complex dynamic teams to ensure clinical operations are executed in a quick and competent manner. At the same time, the fluid nature of such environments hinders administrators' efforts to define access control policies that appropriately balance patient privacy and healthcare functions. Manual efforts to define these policies are labor-intensive and error-prone, often resulting in systems that endow certain care providers with overly broad access to patients' medical records while restricting other providers from legitimate and timely use. In this work, we propose an alternative method to generate these policies by automatically mining usage patterns from electronic health record (EHR) systems. EHR systems are increasingly being integrated into clinical environments and our approach is designed to be generalizable across HCOs, thus assisting in the design and evaluation of local access control policies. Our technique, which is grounded in data mining and social network analysis theory, extracts a statistical model of the organization from the access logs of its EHRs. In doing so, our approach enables the review of predefined policies, as well as the discovery of unknown behaviors. We evaluate our approach with 5 months of access logs from the Vanderbilt University Medical Center and confirm the existence of stable social structures and intuitive business operations. Additionally, we demonstrate that there is significant turnover in the interactions between users in the HCO and that policies learned at the department-level afford greater stability over time.

Indexed as

Electronic Health RecordsHealth PolicyComputer SecurityConfidentialityData MiningHumansPolicy

Identifiers

PMID21277996
PMCPMC3063332

What OpenQuestion holds

Textmetadata
LicenceTDM
Read underepoch 390

Registered trials

None linked

Read under generation 80e0d062 · epoch 390. Bibliography from PubMed, PubMed Central and OpenAlex; grants from NIH RePORTER; trial links from ClinicalTrials.gov; estimates, votes and beliefs from the OpenQuestion graph.