A lightweight policy preserving EHR sharing scheme in the cloud

• Main Authors: YING, Zuobin, WEI, Lu, LI, Qi, LIU, Ximeng, CUI, Jie
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2018
• Subjects: Attribute cuckoo filter (ACF); access control; cloud computing; CP-ABE; Electronic Health Record (EHR); policy preserving; Health Information Technology; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/5140; https://ink.library.smu.edu.sg/context/sis_research/article/6143/viewcontent/08468149_pvoa.pdf
• Institution: Singapore Management University

Electronic Health Record (EHR) is a digital health documentary. It contains not only the health-related records but also the personal sensitive information. Therefore, how to reliably share EHR through the cloud is a challenging issue. Ciphertext-policy attribute-based encryption (CP-ABE) is a promising cryptography prototype, which can achieve fine-grained access control as well as one-to-many encryption. In CP-ABE, access policy is attached to the ciphertext, and however, the access policy is not protected, which will also cause some privacy leakage. In this paper, we propose a policy preserving EHR system on the basis of CP-ABE. Specifically, we designed an algorithm, which can hide the entire access policy as well as recover the hidden attributes from the access matrix. The subsequent evaluation of element insert, lookup, and recovery shows that our proposed scheme only introduces light-weighted overhead cost. The security analysis indicates that the scheme is selectively secure under q-BDHE assumption.