Evidence map›Paper›PMID 42436891›Full record

ArticleDigital health

Enhancing healthcare service efficiency and compliance: A dynamic permission access control method for hospital environments based on I_ABRAC model.

Minshi Wang, Min Xu, Min Zhou

Abstract read
In one paragraph

Article in Digital health. The graph could read no effect estimate from its abstract, so it casts no vote on the map. Not yet cited in PubMed.

0numbers the graph read from it
0cells of the map it votes in
0citing papers in PubMed
–field-weighted citation impact
1 · What the graph read from it

What it found

Each row is one number read from the abstract, on the scale the paper reported it, with its interval. Left of the dashed line favours the treatment, right favours the comparator. Under each row is the sentence it came from. New to these charts? A ten-minute tutorial.

The abstract states no effect estimate the extractor could read, or names no intervention and outcome on the map, so this paper lights no cell and moves no belief. It is still indexed, cited and linked below.

2 · The registry

The trial behind it

Trials whose registry record cites this paper, or whose number appears in the abstract. A trial that started after this paper was published is citing it as background, not reporting it.

Neither the registry nor the abstract names a trial number. If this is a trial report, that itself is worth knowing.

3 · Its place in the literature

Who cites it

0 citing papers in PubMed.

No citing paper in PubMed yet.

4 · The record

Corrections and comments

PubMed lists nothing against this paper. Absence here is not a guarantee, only a check that was made.

5 · Who and what money

Authors and funding

3 authors.

Minshi WangThe First Affiliated hospital, Zhejiang University School of Medicine, Hangzhou, Zhejiang, China.ORCID https://orcid.org/0000-0001-9206-4682
Min XuThe First Affiliated hospital, Zhejiang University School of Medicine, Hangzhou, Zhejiang, China.ORCID https://orcid.org/0000-0001-7670-6155
Min ZhouThe First Affiliated hospital, Zhejiang University School of Medicine, Hangzhou, Zhejiang, China.ORCID https://orcid.org/0009-0006-7884-140X

Funding

No grant is acknowledged in the PubMed record.

6 · The paper itself

Abstract

Background and Objective: Hospital access control systems face unique challenges in environments with high staff mobility and overlapping roles. This study aims to develop and validate an Improved Attribute-Based Role Access Control (I_ABRAC) model to address role explosion, computational inefficiency, and compliance issues in healthcare settings. Methods: We proposed an I_ABRAC model incorporating three mechanisms: (1) an approval-permission dynamic coupling mechanism, (2) a rule number-driven incremental update algorithm, and (3) a permission-rule traceability framework. The model was validated using real-world de-identified operational data from a large tertiary teaching hospital in China, encompassing 60 access control rules, approximately 20,000 personnel, and over 2,000 access points. Experiments were conducted across 16 test scenarios under 24 configurations (8 personnel scales × 3 rule scales). Results: The I_ABRAC model achieved a 68% reduction in required system roles compared to traditional models (from 176 to 56 roles) while demonstrating correct functional permission assignment across all 16 test scenarios. The optimized algorithm demonstrated an 83.3% improvement in processing efficiency (from 54.96±1.89s to 9.96±2.78s; p<0.001), with performance gains ranging from 81.9% to 83.9% across all 24 configurations (8 personnel scales * 3 rule scales, all p<0.001), confirming its scalability from departmental to hospital-wide deployments. Conclusions: The I_ABRAC framework effectively resolves core security and operational bottlenecks in hospital access control, provides technical mechanisms to support compliance with medical regulations, and supporting scalable applications such as IoT-based device access and multi-hospital systems.

Indexed as

ABACaccess controlhealthcare informaticspermission managementpersonal privacy protectionRBACsmart hospital

Identifiers

PMID42436891
PMCPMC13354919

What OpenQuestion holds

Textmetadata
LicenceCC BY-NC
Read underepoch 390

Registered trials

None linked

Read under generation 80e0d062 · epoch 390. Bibliography from PubMed, PubMed Central and OpenAlex; grants from NIH RePORTER; trial links from ClinicalTrials.gov; estimates, votes and beliefs from the OpenQuestion graph.