基于区块链和代理重加密的电子处方共享方案  

Electronic Prescription Sharing Scheme Based on Blockchain and Proxy Re-encryption

作　　者：唐飞[1,2] 陈云龙 冯卓 TANG Fei;CHEN Yun-long;FENG Zhuo(School of Computer Science and Technology,Chongqing University of Posts and Telecommunications,Chongqing 400065,China;School of Cyber Security and Information Law,Chongqing University of Posts and Telecommunications,Chongqing 400065,China)

机构地区：[1]重庆邮电大学计算机科学与技术学院,重庆400065 [2]重庆邮电大学网络空间安全与信息法学院,重庆400065

出　　处：《计算机科学》2021年第S01期498-503,共6页Computer Science

基　　金：国家自然科学基金项目(61702067);重庆市基础科学与前沿技术研究项目(cstc2017jcyjAX0201)。

摘　　要：电子处方数据一般采用中心化存储机制,这一机制面临着内部人员篡改的风险。此外,处方数据是用户的重要隐私信息,因此在保存或传输过程中需要加密,但普通的加密方案往往又面临共享困难这一难题。针对电子处方存储中心化、共享困难及保存传输安全性要求高等问题,提出一种基于区块链和条件代理重加密的电子处方共享方案。条件代理重加密方案可为电子处方共享提供一种密文的高效转发机制,同时还可实现解密权限的细粒度划分方法。传统的基于身份条件代理重加密方案需要一个可信的密钥生成中心(Key Generation Center,KGC)生成用户密钥,但是,这一需求与区块链的去中心化性质相矛盾。借助分布式密钥生成技术解决这一密钥托管问题,构造具有多中心的条件代理重加密方案使其适用于区块链应用场景。最后,从正确性、安全性等方面对所提方案进行分析。The storage mechanism of electronic prescription data generally is centralized.Such centralized mechanism may suffer from the risk of insider tampering attack.In addition,prescription data is important privacy information for users.Therefore,it needs to be encrypted during storage or transmission.However,common encryption schemes often have the problem that they are difficult to sharing.In order to solve the problems of electronic prescription storage centralization,sharing difficulties and high storage and transmission security requirements,this work proposes an electronic prescription sharing scheme based on blockchain and conditional proxy re-encryption.The conditional proxy re-encryption scheme can provide an efficient ciphertext forwarding mechanism for electronic prescription sharing.It also can realize a fine-grained division method of decryption authority.The traditional proxy re-encryption scheme based on identity conditions requires a trusted key generation center(KGC)to generate user keys.However,this requirement is in contradiction with the decentralized feature of the blockchain.We use the distributed key generation technology to solve this key escrow problem,and construct a conditional proxy re-encryption scheme with multiple authorities to make it suitable for blockchain scenarios.Finally,we analyze the proposed scheme from the aspects of correctness and safety.

关 键 词：电子处方 区块链 条件代理重加密 分布式密钥生成 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]