
134 ◾ Secure Data Provenance and Inference Control
notes about the patient. At the end of the checkup, the physician then updated the
patient’s record, which resulted in a newer version, med:Doc1_2. In the second
phase, the patient returned for a follow-up visit at the physician’s request. During
this visit, the physician consulted with the patient’s record for a review of the
patient’s history and then performed a series of tests on the patient. At the end of
this visit, the physician then updated the patient’s record, which results in a newer
version, med:Doc1_3. In the third phase, the patient returned to undergo heart
surgery. is was ordered ...