基于区块链的医疗数据细粒度安全共享系统  

Blockchain-based fine-grained secure sharing for medical data system

作　　者：祝剑 马妍 崔辉 韩刚 袁佳良 ZHU Jian;MA Yan;CUI Hui;HAN Gang;YUAN Jialiang(Editorial Department of Journal,Xi’an University of Posts and Telecommunications,Xi’an 710121,China;School of Cyberspace Security,Xi’an University of Posts and Telecommunications,Xi’an 710121,China;School of Information Technology,Faculty of IT Monash University,Australia)

机构地区：[1]西安邮电大学学报编辑部,陕西西安710121 [2]西安邮电大学网络空间安全学院,陕西西安710121 [3]莫纳什大学信息技术学院,澳大利亚

出　　处：《西安邮电大学学报》2022年第6期75-85,共11页Journal of Xi’an University of Posts and Telecommunications

基　　金：国家自然科学基金项目(62102312);陕西省自然科学基础研究计划项目(2021JQ-722);陕西省高校科学技术协会青年人才托举计划项目(20210119);西安邮电大学教学改革研究项目(JGB201924)。

摘　　要：对降低区块链医疗系统链上压力、提高医疗数据机密性以及实现医疗数据安全共享等问题进行研究,提出一种基于区块链的医疗数据细粒度安全共享(Blockchain-based Fine-Grained Secure Sharing for Medical Data,B-SSMD)系统。该系统采用三条区块链与星际文件系统(Interplanetary Tile System,IPFS)相结合的方法将医疗数据分层存储。通过分配属性实现用户分类,提高系统细粒度,并采用属性加密技术对密钥和密码文本路径进行二次加密,降低系统被攻击风险。为了验证所提系统的有效性,将所提系统与基于区块链的电子病历隐私保护数据共享系统和基于混合区块链的电子病历共享系统进行比较。验证结果表明,所提系统的安全性远高于单链模型,医疗数据在共享过程中能够得到更加安全、高效的管理。Reserach on the problems of reducing the on-chain pressure of blockchain medical system,improving the confidentiality of medical data,and realizing the secure sharing of medical data,and propose a blockchain-based fine-grained secure sharing for medical data(B-SSMD)system.The system uses a combination of three blockchains and an interstellar file system to store medical data in a hierarchical way.User classification is achieved by assigning attributes to improve the system granularity,and attribute encryption is used to secondary encrypt the key and cipher text paths,which greatly reduces the risk of the system being attacked.To verify the effectiveness of the proposed scheme,the proposed system is compared with a blockchain-based electronic medical record privacy-protected data sharing system as well as a hybrid blockchain-based electronic medical record sharing system.The validation results show that the security of this system is much higher than that of the single-chain model,and medical data can be managed more securely and efficiently in the sharing process.

关 键 词：区块链 三链模型 分层加密 属性加密 细粒度访问控制 

分 类 号：T309.2[一般工业技术]