Authorisation and access control for electronic health record systems - Blobel, B (Int J Med Inf, 2004)