CYB5CYA: The MHR System is a New Initiative in Australia - Role-Based Access Control (RBAC) Model - Report Writing Assignment Help

Assignment Task:

Objective: The objective of this assignment is to identify a set of (cyber security) algorithmic requirements and apply the relevant error detection and correction algorithms for a given application (Australian My Health Record - MHR system). 

Consider the following Australian MHR (My Health Record System) scenario:

• The MHR system is a new initiative in Australia to put all the patients’ records (e.g., demographic data, daily medical records, previous medical information, diagnosis data, insurance information, and so on) into one place.

• The MHR is a software system that will allow different parties to communicate securely and provide reliable services to patients.

• For exploratory purpose, a core MHR system is built which keeps and maintains data and information about the patients, doctors, nurses, specialists, medical receptionists, and so on.

• The MHR system controls our health information securely in one place. It is really our choice - we can keep our MHR with basic information, or we can allow more information to MHR users or permanently delete the record. A MHR user is an individual who has right to use patients' health information. For example, A Doctor can do the following actions through MHR system: Login to the system, Access patients' health information, Write prescription, Recommend patient to the specialists. The MHR system also gives our pharmacists a clearer picture of our health information.

• A receptionist is responsible to enter the information of a patient. The information about a patient includes their name, address, date-of-birth, contact number, and food preference. • A doctor can issue a prescription if the patient asks for one. A doctor also can recommend the patient to medical specialists. A doctor can access a patient’s medical records that are stored into the MHR database.

• In your answer, you can make other assumptions, according to the relevant interactions between the MHR system and different actors. However, you should clearly state them. 

• The following use cases may be identified, which analyse the MHR system’s requirements.

• Login to the system

• Add a patient

• Ask a patient to provide postal address

• Access patients' health information

• Write prescription

• Recommend patient to the specialists

• Display patient demographic records

• Display patient medical records • etc. Based on the above-presented MHR scenario, you can demonstrate different processes by showing the actions and the flows among the actions (use activity diagrams to demonstrate the processes). Firstly, consider the description of the processes from the MHR scenario (e.g., 'to issue a business order' can be a process for a business application scenario) and identify different actions for that process (e.g., 'receive order' and 'close order' are two actions for the process named 'to issue a business order'). Finally, draw one or more activity diagrams for those two processes using the following symbols (action, flow, decision point, merge point, fork point, join point and so on). You can use different symbols based on your need. You also can draw malicious activity diagrams (MADs or mal-activity diagrams) covering security flaws of the processes. Firstly, you have to identify the relevant malicious actions by thinking a hacker’s activities (e.g., 'send an email with malware' is a malicious action), then draw your MADs. For example, you can draw an activity diagram for a process named 'login to the MHR system'; you can draw a MAD diagram - 'how a hacker can receive login credentials'? You can attach your MAD parts along with your activity diagrams.Please attempt the following three activities.

Activity (1):

• Identify two processes from the above-mentioned MHR scenario.

• Write simple descriptions for those processes – 4 marks

• Identify relevant actions for those processes.

• Identify malicious actions against those actions – 4 marks

• Draw activity diagrams along with malicious activities.

• Different users can interact using MHR system and do different actions - you can use activity diagrams to demonstrate such actions. Identify how a hacker could potentially harm such interactions and do different malicious actions - you can use mal-activity diagrams to demonstrate such malicious actions. What are the lessons you have learnt through using activity and malicious activity diagrams? 

Activity (2):

• Understand the basic concepts of encoding and decoding processes of error detection and correction algorithms.

• Write your reflections on using relevant error detection and correction algorithms during communication and interactions between two entities of MHR system.

Activity (3): 

• Write your reflections on ACID security properties of MHR database transaction. How to ensure these security properties with regards to successful database transactions. 

• How can you apply the Role-Based Access Control (RBAC) model to safeguard MHR data and to provide relevant MHR access to authorized users? In your discussion, please include the basic concepts of RBAC model with examples from MHR system.

This Report Writing Assignment has been solved by our Report Writing Experts at My Uni Paper. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+ Students in Australia, UK & US by helping them to score HD in their academics. Our Experts are well trained to follow all marking rubrics & referencing style.

Be it a used or new solution, the quality of the work submitted by our assignment experts remains unhampered. You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed that you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive, plagiarism (with free Turnitin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.