Securing electronic medical record and electronic health record systems through an improved access control