Multi-authority attribute hidden for electronic medical record sharing scheme based on blockchain

Lin JIN; Youliang TIAN

doi:10.11959/j.issn.2096-109x.2022044

您当前的位置：

首页 >

文章列表页 >

Multi-authority attribute hidden for electronic medical record sharing scheme based on blockchain

Topic: Blockchain System, Smart Contract and Application Security | 更新时间：2024-06-03

- Multi-authority attribute hidden for electronic medical record sharing scheme based on blockchain
- Chinese Journal of Network and Information Security Vol. 8, Issue 4, Pages: 66-76(2022)
- 作者机构：
  
  1. 贵州大学计算机科学与技术学院贵州贵阳 550025
  2. 贵州省公共大数据重点实验室贵州贵阳 550025
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2022044
  CLC： TP393
- Online First：2022-08，
  
  Published：15 August 2022
- 稿件说明：
移动端阅览
Lin JIN, Youliang TIAN. Multi-authority attribute hidden for electronic medical record sharing scheme based on blockchain[J]. Chinese Journal of Network and Information Security, 2022, 8(4): 66-76.
DOI：

Lin JIN, Youliang TIAN. Multi-authority attribute hidden for electronic medical record sharing scheme based on blockchain[J]. Chinese Journal of Network and Information Security, 2022, 8(4): 66-76. DOI： 10.11959/j.issn.2096-109x.2022044.

摘要

现阶段，不同医院之间没有数据交换共享，容易形成数据孤岛。同时，区域医疗数据含有大量患者的敏感信息，这些数据的公开获取、共享及流通会导致恶意篡改、窃取、滥用与所有权丢失，从而泄露患者隐私。由于庞大的医疗数据量以及医疗数据的非结构化，一些具有较强针对性的恶意攻击更加难以防范与追责，如对医疗数据的窃取、篡改、勒索等恶意攻击。针对以上问题，提出一种基于区块链的多权限属性隐藏电子病历共享方案，以实现共享电子病历的细粒度访问的同时，保证患者隐私安全。引入多授权属性加密（MA-ABE）算法，利用多权限机构管理分散属性，同时通过哈希函数来识别不同用户，可以有效抵抗不同权限用户之间的共谋攻击；利用线性秘密共享方案（LSSS）实现属性的部分隐藏，将属性分为属性名与属性值两部分，以保护属性隐私；结合区块链公开透明、不易篡改等特性，设计访问策略可更新算法，基于访问策略更新算法追加策略区块，将新的访问策略上传至区块链中形成策略可更新溯源链，在隐藏策略条件下实现分布式和可信赖的访问控制管理，同时实现数据隐私保护和用户行为的可追溯。通过安全性证明和实验分析，所提方案能在有效保护属性隐私的同时，降低计算开销。

Abstract

Currently

there is no data exchanging and sharing between different hospitals

and it is easy to form data islands.At the same time

regional medical data contains a large amount of sensitive information of patients.The public acquisition

sharing and circulation of these data will lead to malicious tampering

theft

abuse and loss of ownership

thereby revealing patient privacy.In addition

the size of medical data is enormous and the data is unstructured

then it is more difficult to prevent and hold accountable some highly targeted malicious attacks

such as malicious attacks on medical data theft

tampering

and extortion.In view of the above problems

a blockchain-based on multi-authority attribute hidden electronic medical record sharing scheme was proposed to achieve fine-grained access to shared electronic medical records while ensuring patient privacy.The Multi-Authorization Attribute Encryption (MA-ABE) algorithm was introduced

which used multi-authority organizations to manage decentralized attributes.It also used hash functions to identify different users

in order to effectively resist collusion attacks between users with different authorizations.Besides

the linear secrets sharing scheme (LSSS) was used to realize partial hiding of attributes

and the attributes were divided into two parts:attribute name and attribute value.In addition

combined with the characteristics of blockchain openness

transparency and tamper-proof

the design of access policy can update the algorithm.Based on the access policy update algorithm

the policy block was added.The new access policy was uploaded to the blockchain to form a policy update traceability chain

which can realize distributed and reliable access control management under the condition of hidden policy.It can also support data privacy protection at the same time

and traceability of user behavior.The theoretical proof and experimental analysis have proved that this scheme protect attribute privacy effectively

while reduces computational overhead.

关键词

Keywords

references

SAHAI A , WATERS B R . Fuzzy identity-based encryption [C ] // 24th Annual International Conference on Theory and Applications of Cryptographic Techniques . 2004 : 457 - 473 .

LI H , YANG Y , DAI Y , et al . Achieving secure and efficient dynamic searchable symmetric encryption over medical cloud data [J ] . IEEE Transactions on Cloud Computing , 2020 , 8 ( 2 ): 484 - 494 .

LI H , LIU D , DAI Y , et al . Personalized search over encrypted data with efficient and secure updates in mobile clouds [J ] . IEEE Transactions on Emerging Topics in Computing , 2018 , 6 ( 1 ): 97 - 109 .

WANG S , ZHANG Y , ZHANG Y . A blockchain-based framework for data sharing with fine-grained access control in decentralized storage systems [J ] . IEEE Access , 2018 , 6 : 38437 - 38450 .

GOYAL V , PANDEY O , SAHAI A , et al . Attribute-based encryption for fine-grained access control of encrypted data [C ] // 13th ACM conference on Computer and Communications Security . 2006 : 89 - 98 .

BETHENCOURT J , SAHAI A , WATERS B . Ciphertext-policy attribute-based encryption [C ] // 2007 IEEE Symposium on Security and Privacy (SP '07) . 2007 : 321 - 334 .

ZHANG Y , ZHENG D , DENG R H . Security and privacy in smart health:Efficient policy-hiding attribute-based access control [J ] . IEEE Internet Things , 2018 , 5 ( 3 ): 2130 - 2145 .

WU A , ZHANG Y , ZHENG X , et al . Efficient and privacy-preserving traceable attribute-based encryption in blockchain [J ] . Ann.Telecommun. , 2019 , 74 ( 7-8 ): 401 - 411 .

MIAO Y , MA J , LIU X , et al . Lightweight fi-ne-grained search over encrypted data in fog computing [J ] . IEEE Transactions on Services Computing , 2019 , 12 ( 5 ): 772 - 785 .

CHASE M , . Multi-authority attribute-based encryption [C ] // Proceedings of Cryptography Conference on Theory of Cryptography (TCC'07) . 2007 : 515 - 534 .

LIN H , CAO Z F , LIANG X . Secure threshold multi-authority attribute-based encryption without a central authority [C ] // Proceedings of International Conference on Cryptology . 2008 : 426 - 436 .

LEWKO A , WATERS B . Decentralizing attribute-based encryption [C ] // Proceedings of International Conference on the Theory and Applications of Cryptographic Techniques . 2011 : 568 - 588 .

QIAN H L , LI J G , ZHANG Y C , et al . Privacy-preserving personal health record using multi-authority attribute-based encryption with revocation [J ] . International Journal of Information Security , 2015 ( 14 ): 487 - 497 .

ZHONG H , ZHU W , XU Y , et al . Multi-authority attribute-based encryption access control scheme with policy hidden for cloud storage [J ] . Soft Computing A Fusion of Foundations Methodologies ＆Applicaitons , 2018 , 22 ( 1 ): 243 - 251 .

YAN X , LIU Y , LI Z , et al . Multi-authority attribute-based encryption scheme with policy dynamic updating [J ] . Journal on Communications , 2017 , 38 ( 10 ): 94 - 101 .

ZHANG P , CHEN Z , LIU J K , et al . An efficient access control scheme with outsourcing capability and attribute update for fog computing [J ] . Future Generation Computer Systems , 2018 , 78 : 753 - 762 .

DI FRANCESCO MAESA D , MORI P , RICCI L . A blockchain based approach for the definition of auditable access control systems [J ] . Computers ＆ Security , 2019 , 84 : 93 - 119 .

LI R , SONG T , MEI B , et al . Blockchain for large-scale internet of things data storage and protection [J ] . IEEE Transactions on Services Computing , 2019 , 12 ( 5 ): 762 - 771 .

DORRI A , KANHERE S S , JURDAK R , et al . Blockchain for IoT security and privacy:The case study of a smart home [C ] // 2017 IEEE International Conference on Pervasive Computing and Communications Workshops (PerCom Workshops) . 2017 : 618 - 623 .

DING S , CAO J , LI C , et al . A novel attribute-based access control scheme using blockchain for IoT [J ] . IEEE Access , 2019 , 7 : 38431 - 38441 .

MAESA D D F , MORI P , RICCI L . Blockchain based access control [C ] // 2017 IFIP International Conference on Distributed Applications and Interoperable Systems . 2017 : 206 - 220 .

LAI J , DENG R H , LI Y . Fully secure cyphertext-policy hiding CP-ABE [C ] // 2011 International Conference on Information Security Practice and Experience . 2011 : 24 - 39 .

WANG H , NING J , HUANG X , et al . Secure fine-grained encrypted keyword search for e-healthcare cloud [C ] // IEEE Transactions on Dependable and Secure Computing . 2021 : 1307 - 13019 .

CUI H , DENG R H , WU G , et al . An efficient and expressive ciphertext-policy attribute-based encryption scheme with partially hidden access structures [C ] // 2016 International Conference on Provable Security . 2016 : 19 - 38 .

YANG K , HAN Q , LI H , et al . An efficient and fine-grained big data access control scheme with privacy-preserving policy [J ] . IEEE Internet Things , 2017 , 4 ( 2 ): 563 - 571 .

NISHIDE T , YONEYAMA K , OHTA K . Attribute-based encryption with partially hidden encryptor-specified access structures [C ] // 2008 International Conference on Applied Cryptography and Network Security . 2008 : 111 - 129 .

HUR J . Attribute-based secure data sharing with hidden policies in smart grid [J ] . IEEE Transactions on Parallel\＆ Distributed Systems , 2013 , 24 ( 11 ): 2171 - 2180 .

QI H , YING H Z , HUI L . Efficient and robust attribute-based encryption supporting access policy hiding in Internet of Things [J ] . Future Generation Computer Systems , 2018 , 83 : 269 - 277 .

WANG Y , FAN K . Effective CP-ABE with hidden access policy [J ] . Journal of Computer Research and Development , 2019 , 56 ( 10 ): 2151 - 2159 .

LIU Y , DU R . Efficient partially policy-hidden with multi-authority for access control scheme in Internet of Things [C ] // 2020 International Conference on Networking and Network Applications (NaNA) . 2020 : 375 - 380 .

YANG K , JIA X , REN K . Secure and verifiable policy update out-sourcing for big data access control in the cloud [J ] . IEEE Transactions on Parallel and Distributed Systems , 2015 , 26 ( 12 ): 3461 - 3470 .

LIU D , LI H , YANG Y , et al . Achieving multi-authority access control with efficient attribute revocation in smart grid [C ] // 2014 IEEE Inter-national Conference on Communications . 2014 : 634 - 639 .

HUANG X F , TAO Q , QIN B D , et al . Multi-authority attribute based encryption scheme with revocation [C ] // 2015 IEEE International Conference on Computer Communication ＆ Networks . 2015 : 1 - 5 .

田有亮 , 杨科迪 , 王缵 , 等 . 基于属性加密的区块链数据溯源算法 [J ] . 通信学报 , 2019 , 40 ( 11 ): 101 - 111 .

TIAN Y L , YANG K D , WANG Z , et al . Algorithm of blockchain data provenance based on ABE [J ] . Journal on Communications , 2019 , 40 ( 11 ): 101 - 111 .

Views

347

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Double layer federated security learning architecture for artificial intelligence of things

Blockchain-based cross-data center anonymous and verifiable identity authentication scheme

Survey on blockchain privacy protection techniques in cryptography

Multi-party efficient audit mechanism for data integrity based on blockchain

Research progress of access control based on blockchain

Related Author

ZHENG Chengbo

YAN Haonan

FU Caili

ZHANG Dong

LI Hui

WANG Bin

XU Shujiang

ZHANG Chaoyang

Related Institution

School of Cyber Engineering, Xidian University

Hangzhou Hikvision Digital Technology Co.,Ltd

National Computer Network Emergency Response Technical Team/Coordination Center of China(CNCERT/CC)

Zhejiang Key Laboratory of Artificial Intelligence of Things（AIoT）Network and Data Security

Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan), Qilu University of Technology (Shandong Academy of Sciences)

⁰