A framework for user awareness and acceptance of smart card and fingerprint-based access control to medical information systems in South Africa

This paper proposes a framework for user awareness and acceptance of smart card and fingerprint-based access control to medical information systems in South Africa. The study was conducted at Charlotte Maxeke Academic Hospital in Johannesburg, South Africa, and followed a qualitative and interpretive research design to collect data for the ideal deployment of multi-modal access control systems in the hospital. Surveys were distributed to workers in the hospital who require access to patient records-such as clinicians and administrators. The survey resulted in an 86% response rate. The results revealed key problem areas which related to a lack of user awareness and acceptance. One of the key problems was that 79% of respondents indicated they have never had any security awareness sessions or training. Insights from the survey were used to create a framework. The framework extends the Unified Theory of Acceptance of User Technology (UTAUT) model, to address awareness and acceptance problems. The focus was on how user attitudes, beliefs and personal knowledge influence acceptance and usage of access-control technology. Recommendations made to the hospital included that mandatory awareness training programmes be conducted regularly to increase user acceptance of smart card and fingerprint-based access control.