基于代理重加密的电子病历数据共享方案  

Data Sharing Scheme of Electronic Medical Record Based on Proxy Re-Encryption

作　　者：牛淑芬 刘文科 陈俐霞 杜小妮 NIU Shufen;LIU Wenke;CHEN Lixia;DU Xiaoni(College of Computer Science and Engineering,Northwest Normal University,Lanzhou 730070,China;College of Mathematics and Statistics,Northwest Normal University,Lanzhou 730070,China)

机构地区：[1]西北师范大学计算机科学与工程学院,兰州730070 [2]西北师范大学数学与统计学院,兰州730070

出　　处：《计算机工程》2021年第6期164-171,共8页Computer Engineering

基　　金：国家自然科学基金(61562077,61662069,61662071,61772022)。

摘　　要：现有的电子病历大部分只能在医生与患者之间实现数据共享,数据用户难以访问患者的电子病历。针对该问题,提出一种利用代理重加密的电子病历数据共享方案。患者通过搜索陷门得到加密电子病历,数据用户要获取其电子病历,可请求患者和云服务器进行交互,云服务器生成重加密密钥,并对电子病历密文进行代理重加密,经患者授权后将重加密密文发送给数据用户,数据用户用其私钥解密密文,最终获取电子病历数据。基于随机预言机模型的实验结果表明,该方案在改进双线性Diffie-Hellman假设和q决策双线性Diffie-Hellman逆转假设下,均可实现关键字隐私安全和消息隐私安全。Most of the existing electronic medical records can only realize data sharing between doctors and patients,so it is difficult for data users to access the electronic medical records of patients.To solve the problem,this paper proposes a data sharing scheme of Electronic Medical Record(EMR)based on proxy re-encryption.Patients can use trapdoor search to obtain encrypted EMR.The data user can ask patient and cloud server to interact with each other to obtain the patient’s EMR.The cloud server generates the re-encryption key,performs proxy re-encryption on the ciphertext of the EMR,and after authorized by the patient,the re-encrypted ciphertext will be sent to the data user.The data user can decrypt the ciphertext with his or her private key,and finally obtain the EMR data.Results of the experiments based on the random oracle model show that the proposed scheme can achieve keyword privacy security and message privacy security under the modified Bilinear Diffie-Hellman(mBDH)assumption and q-Decision Bilinear Diffie-Hellman Inversion(q-DBDHI)assumption.

关 键 词：云存储 电子病历 关键字搜索 代理重加密 改进双线性Diffie-Hellman假设 q决策双线性Diffie-Hellman逆转假设 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]