disabled for VMs. The Promethease software, however, happens to require an Internet connection for dynamically fetching
the latest expert rules for genome interpretation. For such cases, MyPHRMachines VMs can be given Internet access
through a virtual network proxy. MyPHRMachines platform administrators can define fine-grained policies, e.g. to give
the trusted Promethease virtual machine access to the Internet address of the genomic expert rule repository. An alternative solution would be for the application software vendor to routinely update its provided VM image with the latest expert rules for genome interpretation.
For both use cases, access to a running VM can be delegated by the patient simply specifying the email address of the
caregiver. The caregiver will receive an email with a secureURL to access the running the VM. In this way, access
to patient health records can be delegated by patients to any care institutions or stakeholder requiring so. Following
requirement RB2, the shared VMs do not enable one to download the patient-owned medical data. This functionality
is implemented by enabling the Web portal to instruct the hypervisor to never give Internet access to shared VMs. Hence,
as such, this functionality did not require any use case specific programming.