A Multi-Agent Context-Aware Access Control and Cryptographic Framework for Secure Cloud Based EHR Systems

DOI

10.2991/978-94-6239-616-6_119How to use a DOI?

Keywords

Electronic Health Records(EHR); Context-Aware Access Control; Healthcare Security; Policy-Based Authentication; Medical Data Encryption

Abstract

Electronic Health Records (EHR) systems face critical security challenges in maintaining patient privacy while enabling authorized healthcare professionals to access medical data efficiently. Traditional access control mechanisms often lack granular patient-controlled permissions and fail to provide adequate encryption for sensitive medical information. This research presents a comprehensive context-aware access control system that empowers patients to define personalized access policies while ensuring robust data protection through advanced encryption techniques. The primary objective is to develop a secure, scalable EHR management system that bridges the gap between patient autonomy and healthcare accessibility by implementing dynamic policy-based authentication with access monitoring. Current healthcare systems lack patient-centric control mechanisms and fail to provide transparent access logging, creating vulnerabilities in medical data protection. Our solution employs Flask-based RESTful APIs integrated with MongoDB for scalable data management, JWT tokens for secure authentication, and Fernet symmetric encryption for per-file data protection. The system incorporates a Trusted Third Party (TTP) architecture enabling administrative oversight while maintaining patient privacy. Performance metrics demonstrate efficient access request processing with comprehensive audit trails, ensuring HIPAA compliance and enhanced security. The framework successfully addresses unauthorized access prevention, patient empowerment in data control, and transparent healthcare data management, establishing a new paradigm for secure.

Copyright

© 2026 The Author(s)

Open Access

Open Access This chapter is licensed under the terms of the Creative Commons Attribution-NonCommercial 4.0 International License (http://creativecommons.org/licenses/by-nc/4.0/), which permits any noncommercial use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons license and indicate if changes were made.

Download article (PDF)

TY  - CONF
AU  - K. Poornambigai
AU  - S. Logesh
AU  - M. Kubendiran
AU  - K. Prasanna
PY  - 2026
DA  - 2026/03/31
TI  - A Multi-Agent Context-Aware Access Control and Cryptographic Framework for Secure Cloud Based EHR Systems
BT  - Proceedings of the International Conference on Artificial Intelligence and Secure Data Analytics (ICAISDA 2025)
PB  - Atlantis Press
SP  - 1679
EP  - 1692
SN  - 1951-6851
UR  - https://doi.org/10.2991/978-94-6239-616-6_119
DO  - 10.2991/978-94-6239-616-6_119
ID  - Poornambigai2026
ER  -