Patient-centric authorization framework for electronic healthcare services