Abstract

The sharing of personal health records can help to improve the accuracy of the doctor's diagnosis and to promote the progress of medical research. Currently, to reduce the maintenance cost of data, personal health records are usually outsourced to a third party such as the cloud service provider. In this case, patients may lose direct control over their personal health records and the semi-trusted cloud service provider may tamper with or reveal personal health records. Therefore, ensuring the privacy and integrity of personal health records and realizing the fine-grained access control are crucial issues when personal health records are shared. As a distributed architecture with decentralized and tamper-proof features, blockchain provides a new way to protect the personal health records sharing system. In this paper, we propose a new personal health records sharing scheme with data integrity verifiable based on blockchain. Aiming at the problems of privacy disclosure, limited keyword search ability and loss of control rights in the process of personal health record sharing, the new scheme uses searchable symmetric encryption and attribute-based encryption techniques to achieve privacy protection, keyword search, and fine-grained access control. Compared with the existing similar schemes, the new scheme allows patients to distribute attribute private key for users, avoiding many security problems caused by the existing of attribute authority in the scheme. Furthermore, the new scheme uses blockchain to manage keys in the scheme, avoiding the single point failure problem of centralized key management. In particular, the new scheme stores the hash values of encrypted personal health records in blockchain, and the related index set is stored in smart contract, which can further improve the efficiency of data integrity verification. Finally, performance evaluation and security analysis indicate that our scheme is secure and feasible for practical use.

Highlights

  • In recent years, the rapid development of network information technology and cloud technology has brought a huge impact on people’s lifestyle

  • The main contributions of this paper are summarized as follows: (1) We propose a new personal health records sharing scheme, in which the cloud storage, searchable symmetric encryption, attribute-based encryption, blockchain technology and smart contract are combined together to achieve privacy protection, keyword search, fine-grained access control and data integrity verification

  • We evaluate the performance of the new scheme in terms of smart contract cost and file encryption efficiency

Read more

Summary

INTRODUCTION

The rapid development of network information technology and cloud technology has brought a huge impact on people’s lifestyle. S. Wang et al.: Blockchain-Based Personal Health Records Sharing Scheme With Data Integrity Verifiable set of challenges. The system participants usually escrow their attribute private keys to the trusted authority in the attribute-based encryption scheme This so-called key escrow problem can compromise the confidentiality of personal health records outsourced by patients to the cloud server, especially when the authorization center is threatened. During the sharing of the personal health records, the cloud server may return tampered or partially qualified encrypted personal health records to users for its benefit. (1) We propose a new personal health records sharing scheme, in which the cloud storage, searchable symmetric encryption, attribute-based encryption, blockchain technology and smart contract are combined together to achieve privacy protection, keyword search, fine-grained access control and data integrity verification.

RELATED WORK
THE MODEL OF OUR SCHEME
IMPLEMENTATION OF SMART CONTRACT
Findings
VIII. CONCLUSION
Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call