Securing Electronic Health Records: Using Mobile Ambients

The notion of mobile ambient first introduced by Cardelli and Gordon was a revolution in implementing information security with the help of ambient calculus in situations where the global availability of the data increases the risk of unauthorised and unwanted access. Information flow is defined in terms of the possibility for a confidential ambient/data to move outside a security boundary, and boundary crossings can be captured through suitable ambient calculus primitives. This concept was further extended to Boxed Ambients and Security Boundaries which added stern measures to the security policy to be full proof. The paper first gives a brief introduction of these concepts and their communication primitives. Then the paper describes some cases formulated on these concepts. In the end a Multilevel Security Model is put forth which further is implemented in a real world scenario of Electronic health records.