A secure cloud based Personal Health Record framework for a multi owner environment

详细信息    查看全文

• 作者：D. Sangeetha ; V. Vaidehi
• 关键词：Personal Health Record ; Attribute ; based encryption ; Fine ; grained access control ; Privacy preservation ; Collusion attack
• 刊名：Annals of Telecommunications
• 出版年：2017
• 出版时间：February 2017
• 年：2017
• 卷：72
• 期：1-2
• 页码：95-104
• 全文大小：
• 刊物类别：Engineering
• 刊物主题：Communications Engineering, Networks; Information Systems and Communication Service; Signal,Image and Speech Processing; Computer Communication Networks; Information and Communication, Circuits; R & D
• 出版者：Springer Paris
• ISSN：1958-9395
• 卷排序：72

文摘

Personal Health Record (PHR) is an upcoming online service model for sharing health information. It helps patients to create, control, and share their health information with other users as well as healthcare providers. When PHR is outsourced to a third party semi trusted server, issues such as unauthorized access, privacy, and security concerns arise which remains an open challenge in a multi owner cloud environment. To overcome these challenges, a secure cloud based PHR framework for sharing PHRs among multiple users using attribute-based encryption (ABE) is proposed. In this proposed framework, patients can encrypt their PHRs and store them on semi trusted cloud servers. Moreover, patients can maintain control over access to their PHRs by assigning fine-grained, attribute-based access privileges to chosen data users. In order to achieve fine-grained access control, the proposed PHR framework is divided into personal domain (PSDs) and public domain (PUDs). To ensure security in a cloud based PHR framework, a secure key-policy attribute-based encryption (S-KP-ABE) and privacy preserving decentralized collusion resistant attribute-based encryption (PP-DCR-ABE) algorithm is implemented in the PSDs and PUDs, respectively. From the experimental analysis, it is shown that the proposed cloud based PHR framework improves the efficiency of the system in terms of encryption, decryption, and key generation time in both the domains. Also, the proposed framework is proved to be collusion resistant and the security analysis ensures privacy preservation, trustworthiness between user and authorities, thereby enhancing the security of PHR users in a multi owner environment.