|2/2017 - 5|
Hybrid Solution for Privacy-Preserving Access Control for Healthcare DataSMITHAMOL, M. B. , RAJESWARI, S.
|Click to see author's profile in SCOPUS, IEEE Xplore, Web of Science|
|Download PDF (1,342 KB) | Citation | Downloads: 445 | Views: 1,012|
data privacy, electronic medical records, internet of things, cloud, access control
encryption(11), cloud(10), attribute(9), security(7), secure(7), data(7), control(6), privacy(5), policy(5), grained(5)
Blue keywords are present in both the references section and the paper title.
About this article
Date of Publication: 2017-05-31
Volume 17, Issue 2, Year 2017, On page(s): 31 - 38
ISSN: 1582-7445, e-ISSN: 1844-7600
Digital Object Identifier: 10.4316/AECE.2017.02005
Web of Science Accession Number: 000405378100005
SCOPUS ID: 85020138510
The booming in cloud and IoT technologies has accelerated the growth of healthcare system. The IoT devices monitor the patient's health, and upload collected data as Electronic Medical Records (EMRs) to the cloud for storage and sharing. Outsourcing EMRs to the cloud introduce new security and privacy challenges. In this paper, we proposed a novel architecture ensuring security and privacy for the outsourced health records. The proposed model uses partially ordered set (POSET) for constructing the group based access structure and Ciphertext-Policy Attribute-Based Encryption (CP-ABE) to provide fine-grained EMR access control. The modified group based CP-ABE (G-CP-ABE) minimizes the computational overhead by reducing the number of leaf nodes in the access tree. Also, the proposed G-CP-ABE framework merges symmetric encryption and CP-ABE scheme to minimize the overall encryption time. As a result, G-CP-ABE can be used to monitor health conditions even from a resource constrained IoT device. The performance analysis shows the efficiency of the proposed model, making it suitable for practical use.
|References|||||Cited By «-- Click to see who has cited this paper|
| I. Ungurean, N.C. Gaitan, and V. G. Gaitan, "An IoT architecture for things from industrial environment," in In Communications (COMM), 2014 10th International Conference on, 2014, pp. 14. |
[CrossRef] [Web of Science Times Cited 24] [SCOPUS Times Cited 23]
 P.M. Mell and T. Grance, "The NIST Definition of Cloud Computing," National Institute of Standards and Technology, Gaithersburg, MD, NIST SP 800-145, 2011.
 Q. Zhang, L. Cheng, and R. Boutaba, "Cloud Computing: State-of-the-art and Research Challenges," J. Internet Serv. Appl., vol. 1, no. 1, pp. 718, May 2010.
[CrossRef] [SCOPUS Times Cited 1576]
 G. Corotinschi and V. G. Gaitan, "Smart cities become possible thanks to the Internet of Things," In System Theory, Control and Computing (ICSTCC), 19th International Conference on, IEEE, 2015, pp. 291296.
[CrossRef] [SCOPUS Times Cited 3]
 Y. Lee, P. Kim, and Y. Park, "Secure Multi-Keyword Search with User/Owner-side Efficiency in the Cloud," Adv. Electr. Comput. Eng.,vol. 16, no. 2, pp. 1118, 2016.
[CrossRef] [Full Text] [Web of Science Times Cited 1] [SCOPUS Times Cited 1]
 J. L. Fernández-Alemán, I. C. Señor, P. Á. O. Lozoya, and A. Toval, "Security and Privacy in Electronic Health Records: A systematic literature review," J. Biomed. Inform., vol. 46, no. 3, pp. 541562, June 2013.
[CrossRef] [Web of Science Times Cited 143] [SCOPUS Times Cited 194]
 A. Sahai and B. Waters, "Fuzzy Identity-Based Encryption," in Advances in Cryptology EUROCRYPT 2005, vol. 3494, Springer Berlin Heidelberg, 2005, pp. 457473.
 V. Goyal, O. Pandey, A. Sahai, and B. Waters, "Attribute-based Encryption for Fine-grained Access Control of Encrypted Data," In Proceedings of the 13th ACM conference on Computer and communications security,2006, pp.89
[CrossRef] [SCOPUS Times Cited 2331]
 J. Bethencourt, A. Sahai, and B. Waters, "Ciphertext-Policy Attribute-Based Encryption," In Security and Privacy, 2007. SP'07. IEEE Symposium on, 2007, pp. 321334.
[CrossRef] [Web of Science Times Cited 1217] [SCOPUS Times Cited 2199]
 S. Yu, C. Wang, K. Ren, and W. Lou, "Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing," Proceedings,IEEE2010,pp.19.
[CrossRef] [SCOPUS Times Cited 914]
 F. Han, J. Qin, H. Zhao, and J. Hu, "A general Transformation from KP-ABE to Searchable Encryption," Future Gener. Comput. Syst., vol. 30, pp. 107115, Jan. 2014.
[CrossRef] [Web of Science Times Cited 20] [SCOPUS Times Cited 28]
 L. Touati and Y. Challal, "Collaborative KP-ABE for cloud-based Internet of Things applications,"In Communications(ICC), IEEE 2016, pp. 17.
[CrossRef] [SCOPUS Times Cited 7]
 L. Cheung and C. Newport, "Provably secure ciphertext policy ABE," Proceedings of 14th ACM on Computer and communications Security,2007,pp.456-465.
[CrossRef] [SCOPUS Times Cited 481]
 V. Goyal, A. Jain, O. Pandey, and A. Sahai, "Bounded Ciphertext Policy Attribute Based Encryption," in Automata, Languages and Programming, vol. 5126, Springer Berlin Heidelberg, 2008, pp. 579591.
[CrossRef] [SCOPUS Times Cited 328]
 G. Wang, Q. Liu, and J. Wu, "Hierarchical attribute-based encryption for fine-grained access control in cloud storage services," In Proceedings of 17th ACM on Computer and communications security, 2010. pp.735-737,
[CrossRef] [Web of Science Times Cited 121] [SCOPUS Times Cited 274]
 B. Waters, "Ciphertext-Policy Attribute-Based Encryption: An Expressive, Efficient, and Provably Secure Realization," in Public Key Cryptography PKC 2011, vol. 6571, Springer Berlin Heidelberg, 2011, pp. 5370.
[CrossRef] [SCOPUS Times Cited 759]
 Fuchun Guo, Yi Mu, W. Susilo, D. S. Wong, and V. Varadharajan, "CP-ABE With Constant-Size Keys for Lightweight Devices," IEEE Trans. Inf. Forensics Secur., vol. 9, no. 5, pp. 763771, May 2014.
[CrossRef] [Web of Science Times Cited 35] [SCOPUS Times Cited 47]
 J. Li, W. Yao, J. Han, Y. Zhang, and J. Shen, "User Collusion Avoidance CP-ABE with Efficient Attribute Revocation for Cloud Storage," IEEE Syst. Journal., pp. 111, 2017.
[CrossRef] [Web of Science Times Cited 22] [SCOPUS Times Cited 14]
 S. Alshehri, S. P. Radziszowski, and R. K. Raj, "Secure Access for Healthcare Data in the Cloud Using Ciphertext-Policy Attribute-Based Encryption," In Data Engineering Workshops (ICDEW), IEEE, 2012., pp. 143146.
[CrossRef] [SCOPUS Times Cited 29]
 M. Li, W. Lou, and K. Ren, "Data security and privacy in wireless body area networks," IEEE Wirel. Commun., vol. 17, no. 1, pp. 5158, Feb. 2010.
[CrossRef] [Web of Science Times Cited 189] [SCOPUS Times Cited 305]
 J. A. Akinyele, M. W. Pagano, M. D. Green, C. U. Lehmann, Z. N. J. Peterson, and A. D. Rubin, "Securing Electronic Medical Records using Attribute-based Encryption on Mobile Devices," Proceedings of ACM workshop on Security and privacy in smartphones and mobile devices, 2011, pp. 75-86.
[CrossRef] [SCOPUS Times Cited 56]
 B. Fabian, T. Ermakova, and P. Junghanns, "Collaborative and Secure Sharing of Healthcare Data in Multi-Clouds," Inf. Syst., vol. 48, pp. 132150, Mar. 2015.
[CrossRef] [Web of Science Times Cited 57] [SCOPUS Times Cited 76]
 J. J. Yang, J. Q. Li, and Y. Niu, "A hybrid Solution for Privacy Preserving Medical Data Sharing in the Cloud Environment," Future Gener. Comput. Syst., vol. 4344, pp. 7486, Feb. 2015.
[CrossRef] [Web of Science Times Cited 65] [SCOPUS Times Cited 93]
 C. Guo, R. Zhuang, Y. Jie, Y. Ren, T. Wu, and K.-K. R. Choo, "Fine-grained Database Field Search Using Attribute-Based Encryption for E-Healthcare Clouds," J. Med. Syst., vol. 40, no. 11, Nov. 2016.
[CrossRef] [Web of Science Times Cited 24] [SCOPUS Times Cited 34]
 Y. Liu, Y. Zhang, J. Ling, and Z. Liu, "Secure and Fine-grained Access Control on e-healthcare Records in Mobile Cloud Computing," Future Gener. Comput. Syst., Jan. 2017.
[CrossRef] [Web of Science Times Cited 7] [SCOPUS Times Cited 13]
 E. A. Bossanyi, "Wind Turbine Control for Load Reduction," Wind Energy, vol. 6, no. 3, pp. 229244, Jul. 2003
[CrossRef] [Web of Science Times Cited 188] [SCOPUS Times Cited 291]
 R. E. Precup and S. Preitl, "Optimisation criteria in development of fuzzy controllers with dynamics," Eng. Appl. Artif. Intell., vol. 17, no. 6, pp. 661674, Sep. 2004.
[CrossRef] [Web of Science Times Cited 42] [SCOPUS Times Cited 52]
 M. A. Ramírez-Ortegón, V. Märgner, E. Cuevas, and R. Rojas, "An optimization for binarization methods by removing binary artifacts," Pattern Recognit. Lett., vol. 34, no. 11, pp. 12991306, Aug. 2013
[CrossRef] [Web of Science Times Cited 7] [SCOPUS Times Cited 15]
 S. B. Ghosn, F. Drouby, and H. M. Harmanani, "A Parallel Genetic Algorithm for the Open-Shop Scheduling Problem Using Deterministic and Random Moves," Int. J. Artif. Intell., vol. 14, no. 1, pp. 130144, 2016.
 D. Boneh and M. Franklin, "Identity-Based Encryption from the Weil Pairing," in Advances in Cryptology CRYPTO 2001, vol. 2139, Springer Berlin Heidelberg, 2001, pp. 213229.
Web of Science® Citations for all references: 2,162 TCR
SCOPUS® Citations for all references: 10,143 TCR
Web of Science® Average Citations per reference: 68 ACR
SCOPUS® Average Citations per reference: 317 ACR
TCR = Total Citations for References / ACR = Average Citations per Reference
We introduced in 2010 - for the first time in scientific publishing, the term "References Weight", as a quantitative indication of the quality ... Read more
Citations for references updated on 2019-03-22 04:10 in 199 seconds.
Note1: Web of Science® is a registered trademark of Clarivate Analytics.
Note2: SCOPUS® is a registered trademark of Elsevier B.V.
Disclaimer: All queries to the respective databases were made by using the DOI record of every reference (where available). Due to technical problems beyond our control, the information is not always accurate. Please use the CrossRef link to visit the respective publisher site.
Faculty of Electrical Engineering and Computer Science
Stefan cel Mare University of Suceava, Romania
All rights reserved: Advances in Electrical and Computer Engineering is a registered trademark of the Stefan cel Mare University of Suceava. No part of this publication may be reproduced, stored in a retrieval system, photocopied, recorded or archived, without the written permission from the Editor. When authors submit their papers for publication, they agree that the copyright for their article be transferred to the Faculty of Electrical Engineering and Computer Science, Stefan cel Mare University of Suceava, Romania, if and only if the articles are accepted for publication. The copyright covers the exclusive rights to reproduce and distribute the article, including reprints and translations.
Permission for other use: The copyright owner's consent does not extend to copying for general distribution, for promotion, for creating new works, or for resale. Specific written permission must be obtained from the Editor for such copying. Direct linking to files hosted on this website is strictly prohibited.
Disclaimer: Whilst every effort is made by the publishers and editorial board to see that no inaccurate or misleading data, opinions or statements appear in this journal, they wish to make it clear that all information and opinions formulated in the articles, as well as linguistic accuracy, are the sole responsibility of the author.