Towards Secure and Privacy-Preserving Data Sharing for COVID-19 Medical Records: A Blockchain-Empowered Approach
Top Cited Papers
- 4 August 2021
- journal article
- research article
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Network Science and Engineering
- Vol. 9 (1) , 271-281
Abstract
COVID-19 is currently a major global public health challenge. In the battle against the outbreak of COVID-19, how to manage and share the COVID-19 Electric Medical Records (CEMRs) safely and effectively in the world, prevent malicious users from tampering with CEMRs, and protect the privacy of patients are very worthy of attention. In particular, the semi-trusted medical cloud platform has become the primary means of hospital medical data management and information services. Security and privacy issues in the medical cloud platform are more prominent and should be addressed with priority. To address these issues, on the basis of ciphertext policy attribute-based encryption, we propose a blockchain-empowered security and privacy protection scheme with traceable and direct revocation for COVID-19 medical records. In this scheme, we perform the blockchain for uniform identity authentication and all public keys, revocation lists, etc are stored on a blockchain. The system manager server is responsible for generating the system parameters and publishes the private keys for the COVID-19 medical practitioners and users. The cloud service provider (CSP) stores the CEMRs and generates the intermediate decryption parameters using policy matching. The user can calculate the decryption key if the user has private keys and intermediate decrypt parameters. Only when attributes are satisfied access policy and the user's identity is out of the revocation list, the user can get the intermediate parameters by CSP. The malicious users may track according to the tracking list and can be directly revoked. The security analysis demonstrates that the proposed scheme is indicated to be safe under the Decision Bilinear Diffie-Hellman (DBDH) assumption and can resist many attacks. The simulation experiment demonstrates that the communication and storage overhead is less than other schemes in the public-private key generation, CEMRs encryption, and decryption stages. Besides, we also verify that the proposed scheme works well in the blockchain in terms of both throughput and delay.Keywords
Funding Information
- National Natural Science Foundation of China (61373162)
- Sichuan Provincial Science and Technology Department (2019YFG0183)
- Sichuan Provincial Key Laboratory Project (KJ201402)
- Japan Society for the Promotion of Science (JP18K18044, JP21K17736)
This publication has 35 references indexed in Scilit:
- A Key Management Scheme for Secure Communications of Information Centric Advanced Metering Infrastructure in Smart GridIEEE Transactions on Instrumentation and Measurement, 2015
- PPDM: A Privacy-Preserving Protocol for Cloud-Assisted e-Healthcare SystemsIEEE Journal of Selected Topics in Signal Processing, 2015
- White-Box Traceable Ciphertext-Policy Attribute-Based Encryption Supporting Flexible AttributesIEEE Transactions on Information Forensics and Security, 2015
- Searchable ciphertext‐policy attribute‐based encryption with revocation in cloud storageInternational Journal of Communication Systems, 2015
- Security and privacy in electronic health records: A systematic literature reviewJournal of Biomedical Informatics, 2013
- How to use attribute-based encryption to implement role-based access control in the cloud2013
- A secret sharing scheme based on (t, n) threshold and adversary structureInternational Journal of Information Security, 2009
- Attribute-Based Encryption Supporting Direct/Indirect Revocation Modes2009
- Attribute-based encryption with non-monotonic access structures2007
- General Purpose Technologies2005