Enhanced secure medical data sharing with traceable and direct revocation  

作　　者：Peng Weiping Cui Shuang Song Cheng Han Ning 

机构地区：[1]School of Computer Science and Technology,Henan Polytechnic University,Jiaozuo 454003,China

出　　处：《The Journal of China Universities of Posts and Telecommunications》2023年第1期66-79,共14页中国邮电高校学报（英文版）

基　　金：supported by the National Key Research and Development Program of China(2018YFC0604502);the Funding Project for the Young Backbone Teachers of Higher Education Institutions in Henan Province(2019GGJS061)。

摘　　要：Sharing of the electronic medical records among different hospitals raises serious concern of the leakage of individual privacy for the adoption of the semi trustworthiness of the medical cloud platform.The tracking and revocation of malicious users have become urgent problems.To solve these problems,this paper proposed a traceable and directly revocable medical data sharing scheme.In the scheme,a unique identity parameter(ID),which was generated and embedded in the private key generation phase by the medical service provider(MSP),is used to identify legal authorized user and trace malicious user.Only when attributes satisfy the access policy and user’s ID is not in the revocation list can the user calculate the decryption key.Malicious user can be tracked and directly revoked by using the revocation list.Under the assumption of decision bilinear Diffie-Hellman(DBDH),this paper has proved that the scheme is able to achieve security against chosen-plaintext attack(CPA).The performance analysis demonstrates that the sizes of the public key and private key are shorter,and the time overhead is less than other schemes in the public-private key generation,data encryption and data decryption stages.

关 键 词：MEDICAL data SHARING electronic MEDICAL RECORDS tracking and REVOCATION PRIVACY protection 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] R-05[自动化与计算机技术—计算机科学与技术]