Activity-oriented access control to ubiquitous hospital information and services