基于区块链的多权限属性隐藏电子病历共享方案

金琳; 田有亮

doi:10.11959/j.issn.2096-109x.2022044

您当前的位置：

首页 >

文章列表页 >

基于区块链的多权限属性隐藏电子病历共享方案

专栏：区块链系统、智能合约与应用安全 | 更新时间：2024-06-03

- 基于区块链的多权限属性隐藏电子病历共享方案
- Multi-authority attribute hidden for electronic medical record sharing scheme based on blockchain
- 网络与信息安全学报 2022年8卷第4期页码：66-76
- 作者机构：
  
  1. 贵州大学计算机科学与技术学院贵州贵阳 550025
  2. 贵州省公共大数据重点实验室贵州贵阳 550025
- 作者简介：
  
  [ "金琳（1997− ），女，云南曲靖人，贵州大学硕士生，主要研究方向为属性加密、区块链" ]
  [ "田有亮（1982− ），男，贵州盘县人，博士，贵州大学教授、博士生导师，主要研究方向为算法博弈论、密码学与安全协议、大数据隐私保护与区块链技术等" ]
- 基金信息：
  
  国家自然科学基金;The National Natural Science Foundation of China(61662009;61772008);贵州省教育厅科技拔尖人才支持项目;Guizhou Provincial Department of Education Science and Technology Top-notch Talent Support Project([2016]060);贵州省科技重大专项计划基金;The Major Scientific and Technological Special Project of Guizhou Province,China(20183001);贵州省科技计划项目;Guizhou Provincial Science and Technology Plan Project([2017]5788);教育部—中国移动科研基金研发项目;Ministry of Education-China Mobile Research Fund Project(MCM20170401);国家自然科学基金联合基金重点支持项目;Key Program of the National Natural Science Union Foundation of China(U1836205);贵州省科技计划项目;Science and Technology Program of Guizhou Province([2019]1098)
- DOI：10.11959/j.issn.2096-109x.2022044
  中图分类号： TP393
- 网络首发：2022-08，
  
  纸质出版：2022-08-15
- 稿件说明：
移动端阅览
金琳, 田有亮. 基于区块链的多权限属性隐藏电子病历共享方案[J]. 网络与信息安全学报, 2022,8(4):66-76.

Lin JIN, Youliang TIAN. Multi-authority attribute hidden for electronic medical record sharing scheme based on blockchain[J]. Chinese Journal of Network and Information Security, 2022, 8(4): 66-76.
金琳, 田有亮. 基于区块链的多权限属性隐藏电子病历共享方案[J]. 网络与信息安全学报, 2022,8(4):66-76. DOI： 10.11959/j.issn.2096-109x.2022044.

Lin JIN, Youliang TIAN. Multi-authority attribute hidden for electronic medical record sharing scheme based on blockchain[J]. Chinese Journal of Network and Information Security, 2022, 8(4): 66-76. DOI： 10.11959/j.issn.2096-109x.2022044.

摘要

现阶段，不同医院之间没有数据交换共享，容易形成数据孤岛。同时，区域医疗数据含有大量患者的敏感信息，这些数据的公开获取、共享及流通会导致恶意篡改、窃取、滥用与所有权丢失，从而泄露患者隐私。由于庞大的医疗数据量以及医疗数据的非结构化，一些具有较强针对性的恶意攻击更加难以防范与追责，如对医疗数据的窃取、篡改、勒索等恶意攻击。针对以上问题，提出一种基于区块链的多权限属性隐藏电子病历共享方案，以实现共享电子病历的细粒度访问的同时，保证患者隐私安全。引入多授权属性加密（MA-ABE）算法，利用多权限机构管理分散属性，同时通过哈希函数来识别不同用户，可以有效抵抗不同权限用户之间的共谋攻击；利用线性秘密共享方案（LSSS）实现属性的部分隐藏，将属性分为属性名与属性值两部分，以保护属性隐私；结合区块链公开透明、不易篡改等特性，设计访问策略可更新算法，基于访问策略更新算法追加策略区块，将新的访问策略上传至区块链中形成策略可更新溯源链，在隐藏策略条件下实现分布式和可信赖的访问控制管理，同时实现数据隐私保护和用户行为的可追溯。通过安全性证明和实验分析，所提方案能在有效保护属性隐私的同时，降低计算开销。

Abstract

Currently

there is no data exchanging and sharing between different hospitals

and it is easy to form data islands.At the same time

regional medical data contains a large amount of sensitive information of patients.The public acquisition

sharing and circulation of these data will lead to malicious tampering

theft

abuse and loss of ownership

thereby revealing patient privacy.In addition

the size of medical data is enormous and the data is unstructured

then it is more difficult to prevent and hold accountable some highly targeted malicious attacks

such as malicious attacks on medical data theft

tampering

and extortion.In view of the above problems

a blockchain-based on multi-authority attribute hidden electronic medical record sharing scheme was proposed to achieve fine-grained access to shared electronic medical records while ensuring patient privacy.The Multi-Authorization Attribute Encryption (MA-ABE) algorithm was introduced

which used multi-authority organizations to manage decentralized attributes.It also used hash functions to identify different users

in order to effectively resist collusion attacks between users with different authorizations.Besides

the linear secrets sharing scheme (LSSS) was used to realize partial hiding of attributes

and the attributes were divided into two parts:attribute name and attribute value.In addition

combined with the characteristics of blockchain openness

transparency and tamper-proof

the design of access policy can update the algorithm.Based on the access policy update algorithm

the policy block was added.The new access policy was uploaded to the blockchain to form a policy update traceability chain

which can realize distributed and reliable access control management under the condition of hidden policy.It can also support data privacy protection at the same time

and traceability of user behavior.The theoretical proof and experimental analysis have proved that this scheme protect attribute privacy effectively

while reduces computational overhead.

关键词

Keywords

references

SAHAI A , WATERS B R . Fuzzy identity-based encryption [C ] // 24th Annual International Conference on Theory and Applications of Cryptographic Techniques . 2004 : 457 - 473 .

LI H , YANG Y , DAI Y , et al . Achieving secure and efficient dynamic searchable symmetric encryption over medical cloud data [J ] . IEEE Transactions on Cloud Computing , 2020 , 8 ( 2 ): 484 - 494 .

LI H , LIU D , DAI Y , et al . Personalized search over encrypted data with efficient and secure updates in mobile clouds [J ] . IEEE Transactions on Emerging Topics in Computing , 2018 , 6 ( 1 ): 97 - 109 .

WANG S , ZHANG Y , ZHANG Y . A blockchain-based framework for data sharing with fine-grained access control in decentralized storage systems [J ] . IEEE Access , 2018 , 6 : 38437 - 38450 .

GOYAL V , PANDEY O , SAHAI A , et al . Attribute-based encryption for fine-grained access control of encrypted data [C ] // 13th ACM conference on Computer and Communications Security . 2006 : 89 - 98 .

BETHENCOURT J , SAHAI A , WATERS B . Ciphertext-policy attribute-based encryption [C ] // 2007 IEEE Symposium on Security and Privacy (SP '07) . 2007 : 321 - 334 .

ZHANG Y , ZHENG D , DENG R H . Security and privacy in smart health:Efficient policy-hiding attribute-based access control [J ] . IEEE Internet Things , 2018 , 5 ( 3 ): 2130 - 2145 .

WU A , ZHANG Y , ZHENG X , et al . Efficient and privacy-preserving traceable attribute-based encryption in blockchain [J ] . Ann.Telecommun. , 2019 , 74 ( 7-8 ): 401 - 411 .

MIAO Y , MA J , LIU X , et al . Lightweight fi-ne-grained search over encrypted data in fog computing [J ] . IEEE Transactions on Services Computing , 2019 , 12 ( 5 ): 772 - 785 .

CHASE M , . Multi-authority attribute-based encryption [C ] // Proceedings of Cryptography Conference on Theory of Cryptography (TCC'07) . 2007 : 515 - 534 .

LIN H , CAO Z F , LIANG X . Secure threshold multi-authority attribute-based encryption without a central authority [C ] // Proceedings of International Conference on Cryptology . 2008 : 426 - 436 .

LEWKO A , WATERS B . Decentralizing attribute-based encryption [C ] // Proceedings of International Conference on the Theory and Applications of Cryptographic Techniques . 2011 : 568 - 588 .

QIAN H L , LI J G , ZHANG Y C , et al . Privacy-preserving personal health record using multi-authority attribute-based encryption with revocation [J ] . International Journal of Information Security , 2015 ( 14 ): 487 - 497 .

ZHONG H , ZHU W , XU Y , et al . Multi-authority attribute-based encryption access control scheme with policy hidden for cloud storage [J ] . Soft Computing A Fusion of Foundations Methodologies ＆Applicaitons , 2018 , 22 ( 1 ): 243 - 251 .

YAN X , LIU Y , LI Z , et al . Multi-authority attribute-based encryption scheme with policy dynamic updating [J ] . Journal on Communications , 2017 , 38 ( 10 ): 94 - 101 .

ZHANG P , CHEN Z , LIU J K , et al . An efficient access control scheme with outsourcing capability and attribute update for fog computing [J ] . Future Generation Computer Systems , 2018 , 78 : 753 - 762 .

DI FRANCESCO MAESA D , MORI P , RICCI L . A blockchain based approach for the definition of auditable access control systems [J ] . Computers ＆ Security , 2019 , 84 : 93 - 119 .

LI R , SONG T , MEI B , et al . Blockchain for large-scale internet of things data storage and protection [J ] . IEEE Transactions on Services Computing , 2019 , 12 ( 5 ): 762 - 771 .

DORRI A , KANHERE S S , JURDAK R , et al . Blockchain for IoT security and privacy:The case study of a smart home [C ] // 2017 IEEE International Conference on Pervasive Computing and Communications Workshops (PerCom Workshops) . 2017 : 618 - 623 .

DING S , CAO J , LI C , et al . A novel attribute-based access control scheme using blockchain for IoT [J ] . IEEE Access , 2019 , 7 : 38431 - 38441 .

MAESA D D F , MORI P , RICCI L . Blockchain based access control [C ] // 2017 IFIP International Conference on Distributed Applications and Interoperable Systems . 2017 : 206 - 220 .

LAI J , DENG R H , LI Y . Fully secure cyphertext-policy hiding CP-ABE [C ] // 2011 International Conference on Information Security Practice and Experience . 2011 : 24 - 39 .

WANG H , NING J , HUANG X , et al . Secure fine-grained encrypted keyword search for e-healthcare cloud [C ] // IEEE Transactions on Dependable and Secure Computing . 2021 : 1307 - 13019 .

CUI H , DENG R H , WU G , et al . An efficient and expressive ciphertext-policy attribute-based encryption scheme with partially hidden access structures [C ] // 2016 International Conference on Provable Security . 2016 : 19 - 38 .

YANG K , HAN Q , LI H , et al . An efficient and fine-grained big data access control scheme with privacy-preserving policy [J ] . IEEE Internet Things , 2017 , 4 ( 2 ): 563 - 571 .

NISHIDE T , YONEYAMA K , OHTA K . Attribute-based encryption with partially hidden encryptor-specified access structures [C ] // 2008 International Conference on Applied Cryptography and Network Security . 2008 : 111 - 129 .

HUR J . Attribute-based secure data sharing with hidden policies in smart grid [J ] . IEEE Transactions on Parallel\＆ Distributed Systems , 2013 , 24 ( 11 ): 2171 - 2180 .

QI H , YING H Z , HUI L . Efficient and robust attribute-based encryption supporting access policy hiding in Internet of Things [J ] . Future Generation Computer Systems , 2018 , 83 : 269 - 277 .

WANG Y , FAN K . Effective CP-ABE with hidden access policy [J ] . Journal of Computer Research and Development , 2019 , 56 ( 10 ): 2151 - 2159 .

LIU Y , DU R . Efficient partially policy-hidden with multi-authority for access control scheme in Internet of Things [C ] // 2020 International Conference on Networking and Network Applications (NaNA) . 2020 : 375 - 380 .

YANG K , JIA X , REN K . Secure and verifiable policy update out-sourcing for big data access control in the cloud [J ] . IEEE Transactions on Parallel and Distributed Systems , 2015 , 26 ( 12 ): 3461 - 3470 .

LIU D , LI H , YANG Y , et al . Achieving multi-authority access control with efficient attribute revocation in smart grid [C ] // 2014 IEEE Inter-national Conference on Communications . 2014 : 634 - 639 .

HUANG X F , TAO Q , QIN B D , et al . Multi-authority attribute based encryption scheme with revocation [C ] // 2015 IEEE International Conference on Computer Communication ＆ Networks . 2015 : 1 - 5 .

田有亮 , 杨科迪 , 王缵 , 等 . 基于属性加密的区块链数据溯源算法 [J ] . 通信学报 , 2019 , 40 ( 11 ): 101 - 111 .

TIAN Y L , YANG K D , WANG Z , et al . Algorithm of blockchain data provenance based on ABE [J ] . Journal on Communications , 2019 , 40 ( 11 ): 101 - 111 .

浏览量

347

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

面向智能物联网的双层级联邦安全学习架构

基于区块链的跨数据中心匿名可监管身份认证方案

区块链密码学隐私保护技术综述

基于区块链的数据完整性多方高效审计机制

基于区块链的访问控制技术研究进展