医疗云中高效安全的数据共享方案研究  

Research on Efficient and Secure Data Sharing Scheme in Personal Health Record on Cloud

作　　者：黄娜娜 沈亮[1] 杨元原[1] HUANG Nana;SHEN Liang;YUANG Yuanyuan(The Third Research Institute of Ministry of Public Security,Shanghai 200031,China)

机构地区：[1]公安部第三研究所

出　　处：《计算机工程与应用》2020年第1期92-97,共6页Computer Engineering and Applications

基　　金：国家重点研发计划项目（No.2016YFB0800901）

摘　　要：随着云计算的快速发展,个人电子病历记录(Personal Health Record,PHR)作为一种新兴的健康信息交换模式,已经成为研究与应用领域的热点话题。为了实现医疗云中安全高效的数据共享,提出了可撤销的基于CP-ABE的数据共享方案。在该方案中,医疗用户被划分为个人区域(PSD)和公共区域(PUD)。在PSD中,采用改进的聚合加密(IKAE)和改进的属性签名方案分别来实现读和写访问权限。对于PUD的医疗用户来说,使用可撤销的外包加解密方案,在很大程度上减少了PHR用户的开销。该方案还可以实现及时的用户和属性撤销,并且引入多授权机构来降低密钥管理的复杂度。最后通过性能分析证明了该方案的高效性和安全性。With the rapid development of the cloud computing,Personal Health Record(PHR)has become a hot topic recently.In order to realize a secure and efficient PHR scheme,this paper presents a revocable outsourced CP-ABE based PHR scheme.In the scheme,it divides the users into Personal Domain(PSD)and Public Domain(PUD).In the PSD,it adopts the Improved Key-Aggregate Encryption(IKAE)and the Improved Attribute-based Signature(IABS)respectively to achieve read access permission and write access permission.For the PHR users of PUD,it uses revocable outsource-able MA-ABE to largely eliminate the overhead for both the PHR owner and users,which can also support efficient attribute and user revocation.At the same time,the import of multi-authority reduces the complexity of the key management.The performance testing results show the security and efficiency of the proposed scheme.

关 键 词：个人医疗健康档案 可撤销的外包 属性撤销 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]