Securing Personal Health Records By Utilizing Multi-Authority Attribute Based Encryption

computer engineering

Personal health records (PHR) is an emerging patient-centric model of health information exchange which is often outsourced to be stored at third party such as cloud providers. There have been wide privacy concern as personal health information could be exposed to those third party servers and to unauthorized parties. To assure the patients control over access to their own records ,it is one of the method to encrypt the PHRS before outsourcing. Yet issues such as risk of privacy exposure, scalability in key management , flexible access and efficient user revocation have remained the most challenges towards achieving fine-grained cryptographically enforced data access control. We propose a novel of patient-centric framework and a suite of mechanisms for data access control for records, we leverage attribute based encryption (ABE) techniques to encrypt each patients PHR file. Different in securing data outsourcing, we focus on the multiple data owner scenarios and divide the users in the records system into multiple security domains that greatly reduces the key management complexities for owners and users. A high degree of patient privacy is guaranteed by exploiting multi-authority.our scheme also enables dynamic modification of access policies or file attributes , supports efficient on demand user/attribute revocation and break glass access under emergency scenarios. Extensive analytical and experimental results are presented which show the security, scalability and efficiency.

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.