基于多云多链协同的医疗数据安全共享机制  

A Secure Medical Data Sharing Scheme Based on Multi-clouds and Multi-chains Collaboration

作　　者：冯景瑜[1] 汪涛 于婷婷 张文波 FENG Jingyu;WANG Tao;YU Tingting;ZHANG Wenbo(National Engineering Laboratory for Wireless Security,Xi'an University of Posts and Telecommunications,Xi'an 710121,China)

机构地区：[1]西安邮电大学无线网络安全技术国家工程实验室,西安710121

出　　处：《信息网络安全》2022年第1期9-18,共10页Netinfo Security

基　　金：国家自然科学基金[62102311]。

摘　　要：针对区块链难以满足音视频等大容量医疗数据存储的缺陷,文章采用多云多链协同模式,进行医疗数据的安全共享。为阻断身份隐私扩散泄露,提出了一种身份多匿名化方法,匿名存储医院公钥加密的医疗数据于专有云。基于多链区分记录方式,按照患者就医服务类型,提取投影打包到相应区块链上。为预防医院矿工服务器劫持,按链评估信任值,抗击多链共识中潜在的不同矿工行为攻击,设计出一种机密性中转访问控制协议。联盟用户之间可以在不直接访问的条件下,实现医疗数据的安全共享。安全性分析与仿真结果表明,文章提出的方案能有效防范患者身份隐私泄露,可防止医疗数据的窃取和篡改,以较低成本保障共识的精确性。In view of the defect that blockchain cannot meet the requirements of large-capacity medical data storage such as video and audio,this paper adopted the multi-cloud and multi-chain collaborative mode to share medical data safely.In order to prevent proliferation and leakage,an identity multi-anonymization method was proposed to anonymously store medical data encrypted by hospital’s public key in a private cloud.Based on the multi-chains distinguishing record method,the projection will be extracted and packaged on the corresponding blockchain in terms of the patient’s medical service type.To avoid the hijacking of hospital miner server,the trust value is evaluated according to the relevant blockchain,so as to fight against the diverse miners behaviors(DMB)attacks that may exist in the multi-chains consensus.A confidentiality relay access control protocol is designed to achieve the security of medical data sharing among alliance users without direct access.Security analysis and simulation results show that this scheme can effectively prevent the leakage of patient identity privacy,the theft and tampering of medical data.Meanwhile,the accuracy of consensus can be guaranteed at a lower cost.

关 键 词：云储存 区块链 医疗数据 DMB攻击 安全共享 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]