Privacy-preserving multi-authority attribute-based encryption with dynamic policy updating in PHR

Computer Science and Information Systems

article

Yan Xixi¹  Ni Hao¹  Liu Yuan¹  Han Dezhi² 

[1] School of Computer Science and Technology, Henan Polytechnic University;College of Information Engineering, Shanghai Maritime University

关键词: attribute-based encryption;    privacy preserving;    policy dynamic updating;    fine-grained access control;    personal health record.;   

DOI  :  10.2298/CSIS180830029Y

学科分类：土木及结构工程学

来源: Computer Science and Information Systems

【 摘 要 】

As a new kind of patient-centred health-records model, the personalhealth record (PHR) system can support the patient in sharing his/her healthinformation online. Attribute-Based Encryption (ABE), as a new public keycryptosystem that guarantees fine-grained access control of outsourced encrypteddata, has been used to design the PHR system. Considering that privacy preservationand policy updating are the key problems in PHR, a privacy-preserving multiauthority attribute-based encryption scheme with dynamic policy updating in PHRwas proposed. In the scheme, each of the patient’s attributes is divided into twoparts: attribute name and attribute value. The values of the user’s attributes willbe hidden to prevent them from being revealed to any third parties. In addition,the Linear Secret-Sharing Scheme (LSSS) access structure and policy-updatingalgorithms are designed to support all types of policy updating (based on “and”,“or”, and “not” operations). Finally, the scheme is demonstrated to be secure againstchosen-plaintext attack under the standard model. Compared to the existing relatedschemes, the sizes of the user’s secret key and ciphertext are reduced, and the lowercomputing cost makes it more effective in the PHR system.

【 授权许可】

CC BY-NC-ND