Personal Health Records in Cloud Computing Using Attribute Based Encryption

Abstract

Personal data leads to a trend that data owners adopt to remotely outsource their data to clouds for the enjoyment of the high-quality revival and storage service without worrying the load of local data management and maintenance. However, protected share and search for the outsourced data is a challenging task, which may easily incur the leakage of sensible personal information. Efficient data sharing and searching with security is of essential importance. This paper, for the first time, introduces a searchable attribute-based proxy re-encryption system. When we compare to existing systems only aiding both searchable attribute-based functionality and attribute-based proxy re-encryption, our new primitive supports both abilities and gives flexible keyword update service. Particularly, the system enables a data owner to efficiently share his data to a named group of users matching a sharing policy and the data will maintain its searchable property but also the respective search keyword can be uploaded after the data sharing. The new mechanism is suitable to many real-world applications, such as electronic health record systems. It is proved that chosen cipher text is secure in the random oracle model. To achieve fine-grained and efficient scalable data access control for PHRs, we grease attribute based encryption (ABE) techniques to encode each patient’s PHR file. The highest degree of patient privacy is assured simultaneously by using multi-authority ABE. Our scheme enables dynamic modification of access policies and file attributes, guide adequate on-demand user/attribute revocation and break-glass access based on emergency scenarios. Extensive detailed and empirical results are presented which shows the security, scalability and efficiency of proposed scheme.