ABSTRACT Electronic Health Record (EHR) is a digital health documentary. It contains not only the healthrelated records but also the personal sensitive information. Therefore, how to reliably share EHR through the cloud is a challenging issue. Ciphertext-policy attribute-based encryption (CP-ABE) is a promising cryptography prototype, which can achieve fine-grained access control as well as one-to-many encryption. In CP-ABE, access policy is attached to the ciphertext, and however, the access policy is not protected, which will also cause some privacy leakage. In this paper, we propose a policy preserving EHR system on the basis of CP-ABE. Specifically, we designed an algorithm, which can hide the entire access policy as well as recover the hidden attributes from the access matrix. The subsequent evaluation of element insert, lookup, and recovery shows that our proposed scheme only introduces light-weighted overhead cost. The security analysis indicates that the scheme is selectively secure under q-BDHE assumption. INDEX TERMS Attribute cuckoo filter (ACF), access control, cloud computing, CP-ABE, Electronic Health Record (EHR), policy preserving.
Further, the authors in REF employed an attribute authority for granting keys for data consumers in the attribute-based encryption (CP-ABE) prototype to achieve fine-grained access control for EHRs sharing on cloud.
A Lightweight Policy Preserving EHR Sharing Scheme in the Cloud
IEEE Access
IEEE Access
Computer Science