基于跨链的医疗数据安全共享方案  

Cross-chain-based Medical Data Security Sharing Scheme

作　　者：何全文 林庆新[2] 林晖[1] 汪晓丁[1] 范新民 HE Quan-Wen;LIN Qing-Xin;LIN Hui;WANG Xiao-Ding;FAN Xin-Min(College of Computer and Cyber Security,Fujian Normal University,Fuzhou 350117,China;Fuzhou University Zhicheng College,Fuzhou 350002,China;Network and Data Center,Fujian Normal University,Fuzhou 350117,China)

机构地区：[1]福建师范大学计算机与网络空间安全学院,福州350117 [2]福州大学至诚学院,福州350002 [3]福建师范大学网络与数据中心,福州350117

出　　处：《计算机系统应用》2023年第5期97-104,共8页Computer Systems & Applications

摘　　要：医疗机构之间的医疗数据共享对于实现跨医院诊断并促进医学研究发展有着举足轻重的作用.为了解决医疗机构之间医疗数据共享困难的问题,我们提出了一种基于跨链的医疗数据安全共享方案.采用中继链、跨链网关和数据链结合的跨链架构,结合AES和CP-ABE加密算法进行细粒度的医疗数据访问控制.同时利用可搜索加密技术实现医疗数据的安全搜索.为缓解区块链的计算存储开销,将IPFS和区块链相结合,链下存储密文,链上存储密文地址和密钥.通过安全性分析和实验证明,该方案在医疗数据安全共享方面具有可行性.The sharing of medical data among medical institutions plays an important role in realizing cross-hospital diagnosis and promoting the development of medical research.In order to solve difficult medical data sharing among medical institutions,this study proposes a cross-chain-based medical data security sharing scheme.The scheme adopts a cross-chain architecture combining relay chains,cross-chain gateways,and data chains and conducts fine-grained medical data access control based on AES and CP-ABE encryption algorithms.Moreover,searchable encryption is used to realize the safe search of medical data.In order to alleviate the computational storage overhead of blockchain,IPFS and the blockchain are combined for off-chain storage of ciphertext and on-chain storage of ciphertext addresses and keys.The security analysis and experiment prove that the scheme is feasible in medical data security sharing.

关 键 词：区块链 跨链 属性基加密 可搜索加密 访问控制 

分 类 号：R-05[医药卫生] TP309.2[自动化与计算机技术—计算机系统结构]