Design of Secure and Privacy-Preserving Data Sharing Scheme Based on Key Aggregation and Private Set Intersection in Medical Information System

Jihyeon Oh,Seunghwan Son,DeokKyu Kwon,Myeonghyun Kim,Yohan Park,Youngho Park

DOI: https://doi.org/10.3390/math12111717

IF: 2.4

2024-05-31

Mathematics

Abstract:Medical data sharing is pivotal in enhancing accessibility and collaboration among healthcare providers, researchers, and institutions, ultimately leading to enhanced patient outcomes and more efficient healthcare delivery. However, due to the sensitive nature of medical information, ensuring both privacy and confidentiality is paramount. Access control-based data sharing methods have been explored to address these issues, but data privacy concerns still remain. Therefore, this paper proposes a secure and privacy-preserving data sharing scheme that achieves an equilibrium between data confidentiality and privacy. By leveraging key aggregate encryption and private set intersection techniques, our scheme ensures secure data sharing while protecting against the exposure of sensitive information related to data. We conduct informal and formal security analyses, including Burrow–Abadi–Needham logic and Scyther, to demonstrate its resilience against potential adversarial attacks. We also implement the execution time for cryptographic operations using multiprecision integer and a rational arithmetic cryptographic library and perform comparative analysis with existing related schemes in terms of security, computational cost, and time complexity. Our findings demonstrate a high level of security and efficiency, demonstrating that the proposed scheme contributes to the field by providing a solution that protects data privacy while enabling secure and flexible sharing of medical data.

mathematics

What problem does this paper attempt to address?

The paper aims to address the issues of security and privacy protection in medical data sharing. Specifically, the research proposes a secure and privacy-preserving data sharing scheme based on Key Aggregation Encryption (KAE) and Private Set Intersection (PSI) technologies.

The main issues mentioned in the paper are as follows:
1. **Importance of Medical Data Sharing**: With the digital development of medical information systems, medical data sharing is crucial for improving the quality of medical services, promoting medical research progress, and optimizing the allocation of medical resources.
2. **Privacy and Security Challenges**: Due to the sensitivity of medical information, ensuring the privacy and confidentiality of data during the sharing process is very important. Existing access control-based data sharing methods can provide a certain degree of security, but there is still a risk of privacy leakage.
3. **Solution**: The paper proposes a new scheme that combines KAE and PSI technologies to balance data confidentiality and privacy protection. KAE allows the decryption of multiple encrypted data with a single aggregate key, while PSI enables data owners and data users to confirm that they have common information without revealing specific content. This method reduces the need for data owners to disclose relevant information, thereby effectively alleviating privacy concerns.

In summary, the main goal of the paper is to design a medical data sharing scheme that ensures data security while protecting user privacy.