A secure EMR sharing system with tamper resistance and expressive access control

• Main Authors: XU, Shengmin, NING, Jianting, LI, Yingjiu, ZHANG, Yinghui, XU, Guowen, HUANG, Xinyi, DENG, Robert H.
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2023
• Subjects: Dual-policy attribute-based encryption; user revocation; blockchain; electronic medical records; Health Information Technology; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/7770; https://ink.library.smu.edu.sg/context/sis_research/article/8773/viewcontent/SecureEMR_2023_av.pdf
• Institution: Singapore Management University

To reduce the cost of human and material resources and improve the collaborations among medical systems, research laboratories and insurance companies for healthcare researches and commercial activities, electronic medical records (EMRs) have been proposed to shift from paperwork to friendly shareable electronic records. To take advantage of EMRs efficiently and reduce the cost of local storage, EMRs are usually outsourced to the remote cloud for sharing medical data with authorized users. However, cloud service providers are untrustworthy. In this paper, we propose an efficient, secure, and flexible EMR sharing system by introducing a novel cryptosystem called dual-policy revocable attribute-based encryption and tamper resistance blockchain technology. Our proposed system enables EMRs to be shared at a fine-grained level and allows data users to detect any unauthorized manipulation. Moreover, the key generation center can revoke malicious users without affecting the honest users. We provide the formal security model as well as the concrete scheme with security analysis. The experimental simulation and experimental analysis of our proposed scheme demonstrate that our proposed system has superior performances to the most relevant solutions.