{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2015:O5HKBDDGOKK5NGP2ZF5SPTZAJK","short_pith_number":"pith:O5HKBDDG","canonical_record":{"source":{"id":"1503.06154","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-03-20T16:47:51Z","cross_cats_sorted":[],"title_canon_sha256":"30bf5147b3cc49bd7e2c883caf1dfb53a37c2038edc06f630188047e6f72d882","abstract_canon_sha256":"1780a5a198db94b6ff5bbbcc7fd04d7d7c393398daceea8f95e247d53d7b1ef3"},"schema_version":"1.0"},"canonical_sha256":"774ea08c667295d699fac97b27cf204a83b07693a97996ba04dd73a2260408fb","source":{"kind":"arxiv","id":"1503.06154","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1503.06154","created_at":"2026-05-18T02:20:48Z"},{"alias_kind":"arxiv_version","alias_value":"1503.06154v1","created_at":"2026-05-18T02:20:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1503.06154","created_at":"2026-05-18T02:20:48Z"},{"alias_kind":"pith_short_12","alias_value":"O5HKBDDGOKK5","created_at":"2026-05-18T12:29:34Z"},{"alias_kind":"pith_short_16","alias_value":"O5HKBDDGOKK5NGP2","created_at":"2026-05-18T12:29:34Z"},{"alias_kind":"pith_short_8","alias_value":"O5HKBDDG","created_at":"2026-05-18T12:29:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2015:O5HKBDDGOKK5NGP2ZF5SPTZAJK","target":"record","payload":{"canonical_record":{"source":{"id":"1503.06154","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-03-20T16:47:51Z","cross_cats_sorted":[],"title_canon_sha256":"30bf5147b3cc49bd7e2c883caf1dfb53a37c2038edc06f630188047e6f72d882","abstract_canon_sha256":"1780a5a198db94b6ff5bbbcc7fd04d7d7c393398daceea8f95e247d53d7b1ef3"},"schema_version":"1.0"},"canonical_sha256":"774ea08c667295d699fac97b27cf204a83b07693a97996ba04dd73a2260408fb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T02:20:48.484597Z","signature_b64":"qdGzKscLTHP2omPtz3rhMWlVNKM4UcrTuV2H+RH55rZr5gOtUlUvpqFuNxIXJW4WI6Wfg/N9MSojxF9W1YRTDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"774ea08c667295d699fac97b27cf204a83b07693a97996ba04dd73a2260408fb","last_reissued_at":"2026-05-18T02:20:48.483905Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T02:20:48.483905Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1503.06154","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T02:20:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ihlN5k2BHrHm+GbgQzc+zB6Td/t5Gn8ddlXEn6lhaivw2dht+atb+PorNlS9zgVaxEXYxgHvM94dx6pK8PSpBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-31T13:37:10.279086Z"},"content_sha256":"dd0382167000083ba02966f1f678703b43f225dfa25f78fbfdcc8625108c78d7","schema_version":"1.0","event_id":"sha256:dd0382167000083ba02966f1f678703b43f225dfa25f78fbfdcc8625108c78d7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2015:O5HKBDDGOKK5NGP2ZF5SPTZAJK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Relationship-Based Access Control for OpenMRS","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"James Sellwood, Jason Crampton, Philip W.L. Fong, Syed Zain Rizvi","submitted_at":"2015-03-20T16:47:51Z","abstract_excerpt":"Inspired by the access control models of social network systems, Relationship-Based Access Control (ReBAC) was recently proposed as a general-purpose access control paradigm for application domains in which authorization must take into account the relationship between the access requestor and the resource owner. The healthcare domain is envisioned to be an archetypical application domain in which ReBAC is sorely needed: e.g., my patient record should be accessible only by my family doctor, but not by all doctors.\n  In this work, we demonstrate for the first time that ReBAC can be incorporated "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1503.06154","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T02:20:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SiytDEErVosr5CLeA81vfJuIULffuixK60uSrMyH8G6Gp2j5tuDFA6xQ6AEIA5IAlJ6hylqSmPEmJ5oWuCe2DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-31T13:37:10.279801Z"},"content_sha256":"f26f7f93b55eeb82c45f366bc428982ca931dca718e440440d9ba72669057670","schema_version":"1.0","event_id":"sha256:f26f7f93b55eeb82c45f366bc428982ca931dca718e440440d9ba72669057670"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/O5HKBDDGOKK5NGP2ZF5SPTZAJK/bundle.json","state_url":"https://pith.science/pith/O5HKBDDGOKK5NGP2ZF5SPTZAJK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/O5HKBDDGOKK5NGP2ZF5SPTZAJK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-31T13:37:10Z","links":{"resolver":"https://pith.science/pith/O5HKBDDGOKK5NGP2ZF5SPTZAJK","bundle":"https://pith.science/pith/O5HKBDDGOKK5NGP2ZF5SPTZAJK/bundle.json","state":"https://pith.science/pith/O5HKBDDGOKK5NGP2ZF5SPTZAJK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/O5HKBDDGOKK5NGP2ZF5SPTZAJK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2015:O5HKBDDGOKK5NGP2ZF5SPTZAJK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1780a5a198db94b6ff5bbbcc7fd04d7d7c393398daceea8f95e247d53d7b1ef3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-03-20T16:47:51Z","title_canon_sha256":"30bf5147b3cc49bd7e2c883caf1dfb53a37c2038edc06f630188047e6f72d882"},"schema_version":"1.0","source":{"id":"1503.06154","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1503.06154","created_at":"2026-05-18T02:20:48Z"},{"alias_kind":"arxiv_version","alias_value":"1503.06154v1","created_at":"2026-05-18T02:20:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1503.06154","created_at":"2026-05-18T02:20:48Z"},{"alias_kind":"pith_short_12","alias_value":"O5HKBDDGOKK5","created_at":"2026-05-18T12:29:34Z"},{"alias_kind":"pith_short_16","alias_value":"O5HKBDDGOKK5NGP2","created_at":"2026-05-18T12:29:34Z"},{"alias_kind":"pith_short_8","alias_value":"O5HKBDDG","created_at":"2026-05-18T12:29:34Z"}],"graph_snapshots":[{"event_id":"sha256:f26f7f93b55eeb82c45f366bc428982ca931dca718e440440d9ba72669057670","target":"graph","created_at":"2026-05-18T02:20:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Inspired by the access control models of social network systems, Relationship-Based Access Control (ReBAC) was recently proposed as a general-purpose access control paradigm for application domains in which authorization must take into account the relationship between the access requestor and the resource owner. The healthcare domain is envisioned to be an archetypical application domain in which ReBAC is sorely needed: e.g., my patient record should be accessible only by my family doctor, but not by all doctors.\n  In this work, we demonstrate for the first time that ReBAC can be incorporated ","authors_text":"James Sellwood, Jason Crampton, Philip W.L. Fong, Syed Zain Rizvi","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-03-20T16:47:51Z","title":"Relationship-Based Access Control for OpenMRS"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1503.06154","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:dd0382167000083ba02966f1f678703b43f225dfa25f78fbfdcc8625108c78d7","target":"record","created_at":"2026-05-18T02:20:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1780a5a198db94b6ff5bbbcc7fd04d7d7c393398daceea8f95e247d53d7b1ef3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-03-20T16:47:51Z","title_canon_sha256":"30bf5147b3cc49bd7e2c883caf1dfb53a37c2038edc06f630188047e6f72d882"},"schema_version":"1.0","source":{"id":"1503.06154","kind":"arxiv","version":1}},"canonical_sha256":"774ea08c667295d699fac97b27cf204a83b07693a97996ba04dd73a2260408fb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"774ea08c667295d699fac97b27cf204a83b07693a97996ba04dd73a2260408fb","first_computed_at":"2026-05-18T02:20:48.483905Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T02:20:48.483905Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"qdGzKscLTHP2omPtz3rhMWlVNKM4UcrTuV2H+RH55rZr5gOtUlUvpqFuNxIXJW4WI6Wfg/N9MSojxF9W1YRTDg==","signature_status":"signed_v1","signed_at":"2026-05-18T02:20:48.484597Z","signed_message":"canonical_sha256_bytes"},"source_id":"1503.06154","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:dd0382167000083ba02966f1f678703b43f225dfa25f78fbfdcc8625108c78d7","sha256:f26f7f93b55eeb82c45f366bc428982ca931dca718e440440d9ba72669057670"],"state_sha256":"45939725bd35776df9c3cdcc1a4b64733e48e5d0f3a4c5ea3109fb960a217c67"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8Nbq3NTT7/ULkGY4WXS02c2SP3WarqXxgAZiRCgyq8wtaK0vRU2qcCdoB/s6XBzCOwnQqW4FYKFe2aLyWx8QDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-31T13:37:10.283637Z","bundle_sha256":"959ab96e377bef03db751332315522782ad5392d69a8546d90533ce1b8bb2b51"}}