Quantified risk-adaptive access control for patient privacy protection in health information systemsQihua WangHongxia Jin2011ASIACCS 2011