FHPT: Fine-grained EHR Sharing in e-healthcare cloud with hidden policy and traceability

• Main Authors: YING, Zuobin, SI, Yuanping, MA Jianfeng, LIU Ximeng, XU, Shengmin
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2020
• Subjects: Black-box; E-healthcare; EHR; Fully Secure; Partial Policy Hiding; Health and Medical Administration; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/6200
• Institution: Singapore Management University

E-healthcare cloud remarkably facilitates patients to outsource their electronic health record (EHR) to achieve large-scale information sharing in real-time for improving the efficiency of diagnosis and treatment. Unfortunately, compared with other outsourced data, EHR contains more personal privacy, which makes it more preferred by the adversaries. Besides, in the e-healthcare cloud, there may exist malicious users who deliberately disclose their access privileges to obtain financial benefits. In this paper, we propose a fine-grained EHR sharing scheme in e-healthcare cloud with hidden policy and traceability. Specifically, we present a new black-box traitor tracing scheme based on partial policy hiding attribute-based encryption and it performs fine-grained access control on the encrypted EHR, which not only prevents privacy leakage from access policy but also effectively track malicious users who leak decryption privileges to construct a black-box. Our scheme is proved to be fully secure under the standard model. Performance analysis shows that the scheme can achieve the design goals in terms of storage and computation overhead. In the meantime, it is more efficient than the existing schemes under the composite order group.