云环境下支持多授权机构的医疗数据安全共享方案  

Medical data secure sharing scheme supporting multi-authority in cloud environment

作　　者：巫朝霞[1] 唐靖蕾 苗志伟 Wu Zhaoxia;Tang Jinglei;Miao Zhiwei(Faculty of Statistics&Data Science,Xinjiang University of Finance&Economics,Urumqi 830012,China)

机构地区：[1]新疆财经大学统计与数据科学学院,乌鲁木齐830012

出　　处：《计算机应用研究》2023年第12期3800-3804,共5页Application Research of Computers

基　　金：国家自然科学基金资助项目(61941205)。

摘　　要：在当前的云环境下,医疗数据存储的研究中存在着隐私信息外泄、机构之间数据共享效率较低等问题。因此,针对云环境下电子医疗数据的安全共享需求,提出了一种支持多属性机构的基于属性的密文策略加密方案,实现了加密医疗数据的细粒度访问控制。通过在加密阶段引入离线计算和在解密阶段引入外包计算,该方案显著降低了加解密延时,提高了医疗数据访问控制的效率。安全性分析和性能分析表明,该方案满足可重放适应性选择密文攻击安全性,且在性能上优于已有的方案,提高了云环境下医疗数据共享的安全性和效率。In the current cloud environment,medical data storage faces issues such as privacy information leakage and low data sharing efficiency among institutions.Therefore,in response to the demand for secure sharing of electronic medical data in a cloud environment,this paper proposed a ciphertext policy-based attribute encryption scheme supporting multi-authorities.This scheme achieved fine-grained access control for encrypted medical data.By introducing offline computation during encryption and outsourcing computation during decryption,the proposed solution significantly reduced encryption and decryption latency,thereby enhancing the efficiency of medical data access control.Security analysis and performance evaluation demonstrate that the proposed scheme satisfied the security requirements against chosen ciphertext attacks with replay adaptivity and outperforms existing solutions in terms of performance.It contributes to improving both the security and efficiency of medical data sharing in a cloud environment.

关 键 词：属性基加密 访问控制 多授权机构 外包解密 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]