Securing Patient-Centric Personal Health Records Sharing System in Cloud Computing  

作　　者：CHEN Danwei CHEN Linling FAN Xiaowei HE Liwen PAN Su Hu Ruoxiang 

机构地区：[1]NanjingUniversityofPostsandTelecommunications,Nanjing210003,JiangsuProvince,ER.China [2]InformationSecurityCenter,BeijingUniversityofPostsandTelecommunications,Beijing100876,China [3]NationalEngineeringLaboratoryforDisasterBackupandRecovery,Beijing100876,China

出　　处：《China Communications》2014年第A01期121-127,共7页中国通信（英文版）

基　　金：the National Natural Science Foundation of China under contract NO 61271235 and No.60973146,and the Fundamental Research Funds for the Central Universities under Grant No.BUPT2013RC0308

摘　　要：Personal health record （PHR） enables patients to manage their own electronic medical records （EMR） in a centralized way, and it is oRen outsourced to be stored in a third-party server. In this paper we propose a novel secure and scalable system for sharing PHRs. We focus on the multiple data owner scenario, and divide the users in the system into multiple security domains that greatly reduce the key management complexity for owners and users. A high degree of patient privacy is guaranteed by exploiting hierarchical and multi- authority attribute-sets based encryption （HM- ASBE）. Our system not only supports compound attributes due to flexible attribute sets combinations, but also achieves fine-grained access control. Our scheme supports efficient on-demand user/attribute revocation and break-glass access under emergency scenarios.

关 键 词：personal health records attribute- based encryption data privacy fine-grained access control 

分 类 号：TP334[自动化与计算机技术—计算机系统结构] TP393.08[自动化与计算机技术—计算机科学与技术]