Designing cloud-based electronic health record system with attribute-based encryption

Abstract

Aquesta és una còpia de la versió author's final draft d'un article publicat a la revista Multimedia tools and applications.La publicació final està disponible a Springer a través de http://dx.doi.org/10.1007/s11042- 013-1829-6 This is a copy of the author 's final draft version of an article published in the journal Multimedia tools and applications.The final publication is available at Springer via http://dx.doi.org/10.1007/s11042-013-1829-6Article publicat / Published article: Xhafa, F., Li, Jingwei, Zhao, G., Li, Jin, Chen, X., Wong, D.S., F. Abstract With the development of cloud computing, electronic health record (EHR) system has appeared in the form of patient-centric, in which patients store their personal health records (PHRs) at a remote cloud server and selectively share them with physicians for convenient medical care. Although the newly emerged form has many advantages over traditional client-server model, it inevitably introduces patients' concerns on the privacy of their PHRs due to the fact that cloud servers are very likely to be in a different trusted domain from that of the patients.In this paper, aiming at allowing for efficient storing and sharing PHRs and also eliminating patients' worries about PHR privacy, we design a secure cloud-based EHR system, which guarantees security and privacy of medical data stored in the cloud, relying on cryptographic primitive but not the full trust over cloud servers. Based on our proposed basic EHR system, we provide several extensions including adding searchability, supporting revocation functionality and enabling efficient local decryption, which fills the gap between theoretical proposal and practical application.

Capabilities and Advantages of Cloud Computing in the Implementation of Electronic Health Record

“…The ability to search in so much of information and data about millions of patients in a database embedded in the cloud based electronic health record environment and the use of various search methods, including the method of combining vocabulary and phrase keywords is of exploration methods (12, 20, 23, 31, 33). Data in the Electronic Health Record can include four categories: a) Clinical data; b) Insurance and financial data; c) Data about drug and usable for researchers; d) Patient behavior and emotional data (32), that to retrieve this information separately or in combination of these categories.…”

Multi-authority security framework for scalable EHR systems

“…Some studies have aimed to implement cryptographic techniques such as ABE schemes to provide security and privacy of EHR data. Xhafa et al (2015) designed a secure cloud-based EHR system with ABE for efficiently storing and sharing PHRs where they applied global authority in the EHR system, responsible for the key management. In another study, Xhafa et al (2014) proposed a PHR service system to provide the efficient searching, fine-grained access control, and PHR data sharing with anonymous ABE in the hybrid cloud environment.…”

A Novel Lattice-Based CP-ABPRE Scheme for Cloud Sharing

“…For example, in an electronic health record (EHR) system [4], the set L of all attributes in the EHR system consists of all kinds of diseases, such as cold, lipomyoma, lung cancer, diabetes, and nephropathy. A patient encrypts their detailed personal information under access structure W, where W may be (cold and lipomyoma) or (diabetes and nephropathy).…”