A Security Model and its Application to a Distributed Decision Support System for Healthcare