基于分布式存储的外包EHR隐私保护分类审计方案  

Classification auditting scheme for privacy protection of outsourced EHR based on distributed storage

作　　者：张晓旭 陈宇辰 哈冠雄 贾春福 ZHANG Xiaoxu;CHEN Yuchen;HA Guanxiong;JIA Chunfu(College of Cyber Science,Nankai University,Tianjin 300350,China;Tianjin Key Laboratory of Network and Data Security Technology,Tianjin 300350,China)

机构地区：[1]南开大学网络空间安全学院,天津300350 [2]天津市网络与数据安全技术重点实验室,天津300350

出　　处：《通信学报》2024年第9期26-39,共14页Journal on Communications

基　　金：国家重点研发计划基金资助项目(No.2018YFA0704703);国家自然科学基金资助项目(No.61972215,No.61972073,No.62172238)。

摘　　要：随着电子医疗领域的发展,电子健康记录(EHR)常被外包到雾节点上进行分布式存储以提升可靠性。EHR中包含大量隐私信息,然而数据外包易造成安全隐患,可能破坏EHR的完整性与隐私性。为确保EHR的安全存储,提出一种高效的基于EHR分类的分布式数据完整性审计方案。该方案将分类标签与布隆过滤器相结合以提升审计效率,利用Shamir秘密共享完成分布式审计,采用属性基可搜索加密以保护EHR所属类别信息的隐私。实验结果表明,所提方案的通信开销和计算开销较低。With the development of the electronic medical field,Electronic health record(EHR)are often outsourced to fog nodes for distributed storage to enhance reliability.EHR contains a large amount of private information,however,data outsourcing can create security risks,potentially compromising the integrity and privacy of EHR.In order to ensure the secure storage of EHR,an efficient distributed data integrity auditing scheme based on EHR classification was proposed.The scheme combined classification labels with Bloom filters to enhance auditing efficiency,Shamir’s secret sharing was used for distributed auditing,and attribute-based searchable encryption was employed to protect the privacy of EHR’category information.Experimental results show that the proposed scheme has low communication and computation costs.

关 键 词：分布式存储 数据审计 EHR Shamir秘密共享 属性基可搜索加密 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]