arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2007.13850cs.CRcs.CY
收藏

基于访问控制的云医疗数据隐私保护模型

A Proposed Access Control-Based Privacy Preservation Model to Share Healthcare Data in Cloud

Pankaj Khatiwada, Hari Bhusal, Ayan Chatterjee, Martin W. Gerdess

摘要:

云计算中的医疗保健数据通过在医疗保健提供者之间共享关于个人健康数据的信息以用于医疗咨询来促进患者的有效治疗。此外,保持数据和患者身份的机密性是另一项具有挑战性的任务。本文提出了一种基于访问控制(AC)的隐私保护模型的概念,用于在拟议的数字系统中进行用户和数据所有者的相互认证。该模型提供了高安全性保证和高效率。拟议的数字系统由四个不同的实体组成:用户、数据所有者、云服务器和密钥生成中心(KGC)。这种方法使系统更加健壮和高度安全,这已经通过多个场景进行了验证。该模型由设置阶段、密钥生成阶段、加密阶段、验证阶段、访问控制阶段和数据共享阶段组成。设置阶段由数据所有者运行,数据所有者将输入作为安全参数并生成系统主密钥和安全参数。然后,在密钥生成阶段,私钥由KGC生成并存储在云服务器中。之后,对生成的私钥进行加密。然后,会话密钥由KGC生成,并授予用户和云服务器进行存储,然后,在验证阶段使用验证消息对结果进行验证。最后,数据与用户共享并在用户端解密。所提出的模型优于其他方法的最大真实数据率为0.91。

英文摘要:

Healthcare data in cloud computing facilitates the treatment of patients efficiently by sharing information about personal health data between the healthcare providers for medical consultation. Furthermore, retaining the confidentiality of data and patients' identity is a another challenging task. This paper presents the concept of an access control-based (AC) privacy preservation model for the mutual authentication of users and data owners in the proposed digital system. The proposed model offers a high-security guarantee and high efficiency. The proposed digital system consists of four different entities, user, data owner, cloud server, and key generation center (KGC). This approach makes the system more robust and highly secure, which has been verified with multiple scenarios. Besides, the proposed model consisted of the setup phase, key generation phase, encryption phase, validation phase, access control phase, and data sharing phase. The setup phases are run by the data owner, which takes input as a security parameter and generates the system master key and security parameter. Then, in the key generation phase, the private key is generated by KGC and is stored in the cloud server. After that, the generated private key is encrypted. Then, the session key is generated by KGC and granted to the user and cloud server for storing, and then, the results are verified in the validation phase using validation messages. Finally, the data is shared with the user and decrypted at the user-end. The proposed model outperforms other methods with a maximal genuine data rate of 0.91.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑