基于区块链的轻量级物联网医疗数据访问控制方案  

Blockchain-assisted lightweight access control schemefor IoT-based smart healthcare system

作　　者：李嘉豪 李冬梅 张晓梅[1] LI Jiahao;LI Dongmei;ZHANG Xiaomei(School of Electronic and Electrical Engineering,Shanghai University of Engineering Science,Shanghai 201620,P.R.China;Shanghai Key Laboratory of Integrated Administration Technologies for Information Security,Shanghai 200240,P.R.China)

机构地区：[1]上海工程技术大学电子电气工程学院,上海201620 [2]上海市信息安全综合管理技术研究重点实验室,上海200240

出　　处：《重庆邮电大学学报（自然科学版）》2024年第1期98-105,共8页Journal of Chongqing University of Posts and Telecommunications(Natural Science Edition)

基　　金：上海市信息安全综合管理技术研究重点实验室开放课题(AGK2019005);科技部科技创新2030—“新一代人工智能”重大项目(2020AAA0109300)~~。

摘　　要：基于物联网的智慧医疗系统,给患者和医务工作者带来极大的便利,但是物联网医疗设备产生的海量医疗数据包含着患者的个人隐私,一旦泄露会造成重大损失,以往的访问控制方案存在不灵活,中心化,加密效率较低等问题。针对这些问题,提出了一种基于区块链的轻量级物联网医疗数据访问控制方案。提出了一种改进的多中心属性基加密(multi-authority attribute-based encryption, MA-ABE)方案为患者提供细粒度的安全数据共享,并且利用IPFS技术存储患者数据。结合雾计算技术,利用雾节点承担属性基加解密过程中大部分的计算开销,减轻了物联网设备负担。进行安全性分析和仿真实验,结果表明,提出的方案在保证安全的情况下为物联网医疗数据提供了高效并且轻量级的访问控制。The IoT-based smart healthcare system brings great convenience to both patients and medical workers.However,the enormous medical data generated by the IoMT devices contain personal sensitive information of patients.Once leaked,it will cause great losses to patients.Previous access control schemes have problems such as inflexibility,centralization,and low encryption efficiency.To solve these problems,we propose a blockchain-assisted lightweight access control scheme for IoT-based smart healthcare system.Firstly,an improved multi-authority attribute-based encryption(MA-ABE)scheme is proposed to provide fine-grained secure data sharing,and IPFS technology is used to store data of patients.Secondly,fog nodes are introduced to carry out most of the computing overhead and reduce the burden on IoMT devices.Finally,through the security analysis and simulation experiments,the results show that our proposed scheme provides medical data with efficient and lightweight access control while ensuring security.

关 键 词：多中心属性基加密(MA-ABE) 雾计算 区块链 访问控制 智慧医疗 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]