Securing protected health information based on software designation

摘要

Methods to perform an operation comprising receiving, from a first process, a request to access content stored in a memory, determining that the content comprises protected health information (PHI), determining, from a secure table, a set of processes permitted to access the PHI, upon determining the first process is not a member of the set of processes, restricting access to the PHI by the first process, and upon determining the first process is a member of the set of processes, permitting access to the PHI by the first process.

主权项

1. A method, comprising:
receiving, from a first process, a request to access content stored in a memory; determining that the content comprises protected health information (PHI), wherein the PHI comprises: (i) a header portion and (ii) a data portion, wherein the header portion comprises: (i) an indication that the PHI is secure data, and (ii) an indication of an owner process that created the PHI data; determining, from a secure table stored in the memory and from the header portion, a set of processes permitted to access the PHI; upon determining the first process is not a member of the set of processes, restricting the first process from accessing the PHI; and upon determining the first process is a member of the set of processes, permitting the first process to access to the PHI.