Abstract. The introduction of e-Health applications has not only brought benefits, but also raised serious concerns regarding security and privacy of health data. The increasing demands of accessing health data, highlighted critical questions and challenges concerning the confidentiality of electronic patient records and the efficiency of accessing these records. Therefore, the aim of this paper is to provide secure and efficient access to electronic patient records. In this paper, we propose a novel protocol called the Linkable Anonymous Access protocol (LAA). We formally verify and analyse the protocol against security properties such as secrecy and authentication using the Casper/FDR2 verification tool. In addition, we have implemented the protocol using the Java technology to evaluate its performance. Our formal security analysis and performance evaluation proved that the LAA protocol supports secure access to electronic patient records without compromising performance.

No abstract

Abstract-This paper describes the growing concern of privacy and security in e-health applications. Sharing sensitive patient data in a distributed environment introduces security and privacy risks. Therefore, there are increasing demands to provide secure access to distributed Electronic Patient Records (EPRs) but without compromising performance. The aim of this paper is to respond to such demands and to support secure and efficient access to distributed EPRs. In this paper, we enhance the Linkable Anonymous Access Protocol while supporting security and performance. To achieve this, we have designed a secure protocol called the Enhanced Linkable Anonymous Access (ELAA) protocol. To show that the ELAA protocol is secure and efficient, (1) we formally verify and analyse it against security properties using the Casper/FDR2 verification tool. In addition, (2) we build a prototype using the Java technology to demonstrate the performance of the enhanced protocol. By doing this, we prove that the ELAA protocol maintains a good balance between security and performance while supporting distributed access to EPRs.

No abstract