Synthèse thématique «Réseaux d’énergie» du PNR «Energie»

Les réseaux énergétiques de la Suisse sont fiables et stables, mais ils sont aussi confrontés à des défis inédits. L’un d’entre eux tient au fait que les nouvelles sources d’énergie renouvelables – installations photovoltaïques et éoliennes – produisent de l’électricité de manière irrégulière. Le réseau énergétique doit par conséquent faire preuve de plus de flexibilité : du côté de l’offre avec des solutions de stockage de l’électricité et de la chaleur et du côté de la demande avec une gestion automatisée de la charge. Par ailleurs, le potentiel de synergie entre les différentes sources d’énergie doit être mis à profit.

SGAC: A Multi-Layered Access Control Model with Conflict Resolution Strategy

This paper presents SGAC (Solution de Gestion Automatisée du Consentement / automated consent management solution), a new healthcare access control model and its support tool, which manages patient wishes regarding access to their electronic health records (EHR). This paper also presents the verification of access control policies for SGAC using two first-order-logic model checkers based on distinct technologies, Alloy and ProB. The development of SGAC has been achieved within the scope of a project with the University of Sherbrooke Hospital (CHUS), and thus has been adapted to take into account regional laws and regulations applicable in Québec and Canada, as they set bounds to patient wishes: for safety reasons, under strictly defined contexts, patient consent can be overriden to protect his/her life (break-the-glass rules). Since patient wishes and those regulations can be in conflict, SGAC provides a mechanism to address this problem based on priority, specificity and modality. In order to protect patient privacy while ensuring effective caregiving in safety-critical situations, we check four types of properties: accessibility, availability, contextuality and rule effectivity. We conducted performance tests comparison: implementation of SGAC versus an implementation of another access control model, XACML, and property verification with Alloy versus ProB. The performance results show that SGAC performs better than XACML and that ProB outperforms Alloy by two order of magnitude thanks to its programmable approach to constraint solving.