Autonomous PHR Sharing: A Patient Centric Scalable and Flexible e-Healthcare Framework
Keywords:
Personal Health Record, cloud computing, Microsoft Health vaultAbstract
An explosive growth of information technology and the widespread use of cloud computing in every field had paved the way for Personal Health Record (PHR) Systems in cloud computing. Microsoft Healthvault is the best choice of example which is a online personal health record service provided by the technology giant Microsoft where the users can store, access and maintain their personal records which is shared to the health care providers. Some critics argue that moving personal data application in cloud computing may compromise control over data. Hence the need for a secure PHR systems in cloud. Many frameworks for PHR have been proposed using traditional cryptographic techniques. But they lack in the aspect of efficiency, scalability and suitability required by the PHR systems. And also the multi owner scenario of PHR system does not go in with single owner scenario of traditional cryptographic techniques. Hence we propose a PHR framework where the patients have access control and privacy of their personal record using light weight 64 bit block cipher symmetric encryption algorithm and also divide the patient centric framework into multiple security domains to reduce the key distribution complexity. The proposed scheme is flexible as it allows break glass decisions in case of emergency scenario. But the system lacks integrity which can be ensured by using digital signature algorithm or Elliptic Curve Digital Signature Algorithm (ECDSA) scheme to achieve integrity of the personal health records.
References
Louis Columbus,2018,“Cloud Computing Survey,” Forbes (26thDecember), at http://www.forbes.com/sites/louiscolumbus/2034/32/26/kpmgs-2034-cloud-computing-survey-enterprises-quickly-moving-beyond-cost-reduction-to-customer-driven-results/ , Accessed by 03 April 2018.
Jin, J., Ahn, G.J., Hu, H., Covington, M.J. and Zhang, X., 2009. “Patient-centric Authorization Framework for Sharing Electronic Health Records”. In the Proceedings of SACMAT 09 Proceedings of the 14th ACM symposium on Access control models and technologies pp. 325–334.
Di Vimercati, S. D. C., Foresti, S., Jajodia, S., Paraboschi, S., & Samarati, P,2017,” Over-encryption: management of access control evolution on outsourced data”.In the Proceedings of the 33rd international conference on Very large data bases pp. 123-134.
Benaloh, Josh, Melissa Chase, Eric Horvitz, and Kristin Lauter. "Patient controlled encryption: ensuring privacy of electronic medical records." In Proceedings of the 2009 ACM workshop on Cloud computing security, pp. 103-114
Dong, C., Russello, G., & Dulay, N. (2011),”Shared and searchable encrypted data for untrusted servers”, Journal of Computer Security, Vol.19,Issue.3, 367-397.
Yu, S., Wang, C., Ren, K., Lou, W,”Attribute based data sharing with attribute revocation”, In Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security ASIACCS 2010 , pp 261-270 .
Li, M., Lou, W., Ren, K.,”Data security and privacy in wireless body area networks”,IEEE Wireless Communications Magazine, Vol.17,Issue.1,2010, pp 51-58.
Goyal, V., Pandey, O., Sahai, A., Waters, B,”Attribute-based encryption for finegrained access control of encrypted data”, In Proceedings of CCS 2006, pp. 89–98.
X. Yao, Y. Lin, Q. Liu and J. Zhang, "Privacy-Preserving Search Over Encrypted Personal Health Record In Multi-Source Cloud," in IEEE Access, Vol. 6, Issue 2,pp. 3809-3823.
V. Indhumathi and V. Prakasham, "On demand security for Personal Health Record in cloud computing,"In Proceedings of International Conference on Innovations in Information, Embedded and Communication Systems (ICIIECS), Coimbatore, 2015, pp. 1-5.
Sakshi kathuria,"A Survey on Security Provided by Multi-Clouds in Cloud Computing",International Journal of Scientific Research in Network Security and Communication,Vol.6,Issue.1,pp 23-28
Downloads
Published
How to Cite
Issue
Section
License
This work is licensed under a Creative Commons Attribution 4.0 International License.
Authors contributing to this journal agree to publish their articles under the Creative Commons Attribution 4.0 International License, allowing third parties to share their work (copy, distribute, transmit) and to adapt it, under the condition that the authors are given credit and that in the event of reuse or distribution, the terms of this license are made clear.
