Cognitive impairment associated with intraoperative and postoperative hypoperfusion without neurologic deficits in a patient undergoing carotid endarterectomy.

K. Ogasawara,Takashi Inoue,M. Kobayashi,T. Fukuda,Nobukazu Komoribayashi,H. Saitoh,Keiko Yamadate,A. Ogawa

DOI: https://doi.org/10.1016/J.SURNEU.2005.07.011

2006-06-01

Surgical Neurology

Abstract:

What problem does this paper attempt to address?

An Access Control Scheme With Privacy-Preserving Authentication and Flexible Revocation for Smart Healthcare

Xiyu Liang,Yali Liu,Jianting Ning

DOI: https://doi.org/10.1109/JBHI.2024.3391218

Abstract:IoT and 5G-enabled smart healthcare allows medical practitioners to diagnose patients from any location via electronic health records (EHRs) by wireless body area network (WBAN) devices. Privacy, including the medical practitioner's identity and the patient's EHR, can easily be leaked from hospitals or cloud servers, and secret keys used to access EHRs must be revoked after diagnosis. In response to the challenges associated with user authentication and secret key revocation, this paper proposes an access control scheme with privacy-preserving authentication and flexible revocation for smart healthcare using attribute-based encryption (ABE), named PAFR-ABE, which provides access control to prevent malicious users from decrypting EHRs. Meanwhile, PAFR-ABE ensures privacy-preserving authentication for users during secret key generation, which safeguards users' identities and prevents unauthorized requests for secret keys. In addition, PAFR-ABE achieves flexible revocation and recovery of secret keys, which eliminates the need to update secret keys for unrevoked users. Security analysis indicates that PAFR-ABE meets the security requirements of an access control scheme for smart healthcare, especially in terms of forward security and backward security. Performance analysis shows that PAFR-ABE is efficient in the key generation and revocation algorithms compared with typical access control schemes.
Mh-abe: multi-authority and hierarchical attribute based encryption scheme for secure electronic health record sharing

Sujoy Roy,Jeet Agrawal,Alok Kumar,Udai Pratap Rao

DOI: https://doi.org/10.1007/s10586-024-04283-z

2024-02-21

Cluster Computing

Abstract:The modern medical system is convergence of cutting-edge technologies and advancements in the healthcare environment. In the modern medical system, the storage of electronic health records is generally leased out to third-party cloud service providers (CSPs). But, CSPs cannot be entirely relied upon due to the potential security and privacy issues. This article presents Multi-Authority and Hierarchical Attribute-Based Encryption Scheme (MH-ABE) scheme to promote secure information sharing and protect patient's privacy. The utilization of CP-ABE in conjunction with multiple Attribute Authorities within the proposed MH-ABE scheme presents a scalable and fine-grained approach to data access control. The proposed MH-ABE scheme incorporates the utilization of a Hierarchical Access Tree to effectively encrypt numerous files concurrently, hence reducing the computational and storage cost. The proposed scheme has also been evaluated using a comparative analysis with existing schemes, emphasizing the assessment of computational and storage costs. The findings of this analysis demonstrate improved performance and efficiency of the proposed ciphertext policy based encryption scheme. The proposed MH-ABE scheme incorporates features such as policy hiding and revocation, and it exhibits resilience against attacks, including collusion resistance, Indistinguishability under chosen-plaintext attack and forward secrecy.

computer science, information systems, theory & methods
Efficient Anonymous Certificate-Based Multi- Message and Multi-Receiver Signcryption Scheme for Healthcare Internet of Things.

Yang Ming,Xiaopeng Yu,Xiaoqin Shen

DOI: https://doi.org/10.1109/access.2020.3018488

IF: 3.9

2020-01-01

IEEE Access

Abstract:Healthcare Internet of Things (IoT) is an emerging paradigm, which can provide comprehensive and different types of health services and enable various types of medical sensors to monitor patient's health conditions. In the healthcare IoT, patient is deployed with a variety of medical sensors, which continuously monitors and collects patient's sensitive health data that needs specially protection for preventing privacy leakage. To safely send multiple different health data monitored by multiple different medical sensors to multiple corresponding healthcare professionals in one data report, several multi-message and multi-receiver signcryption schemes have been introduced by employing the traditional public key cryptography, identity-based cryptography or certificateless cryptography. However, these schemes suffer from the certificate management, key escrow and key distribution problem. Besides, due to the resource-constraint property of medical sensors, they are unsuitable for healthcare IoT in terms of both performance and privacy requirements. To solve these issues, this paper introduces an efficient anonymous certificate-based multi-message and multi-receiver signcryption scheme for healthcare IoT, where the certificate-based cryptography and elliptic curve cryptography are combined to simplify the certificate management problem, eliminate the key escrow problem, solve the key distribution problem and ensure the privacy-preserving. Furthermore, the security analysis suggests that the proposed scheme is able to achieve the confidentiality, unforgeability, receiver anonymity, sender anonymity and decryption fairness; the performance evaluation indicates that the proposed scheme brings to the lower computation cost and communication cost in comparison to the existing schemes.
Scalable and Secure Sharing of Personal Health Records in Cloud Computing Using Attribute-Based Encryption

Ming Li,Shucheng Yu,Yao Zheng,Kui Ren,Wenjing Lou

DOI: https://doi.org/10.1109/tpds.2012.97

IF: 5.3

2013-01-01

IEEE Transactions on Parallel and Distributed Systems

Abstract:Personal health record (PHR) is an emerging patient-centric model of health information exchange, which is often outsourced to be stored at a third party, such as cloud providers. However, there have been wide privacy concerns as personal health information could be exposed to those third party servers and to unauthorized parties. To assure the patients' control over access to their own PHRs, it is a promising method to encrypt the PHRs before outsourcing. Yet, issues such as risks of privacy exposure, scalability in key management, flexible access, and efficient user revocation, have remained the most important challenges toward achieving fine-grained, cryptographically enforced data access control. In this paper, we propose a novel patient-centric framework and a suite of mechanisms for data access control to PHRs stored in semitrusted servers. To achieve fine-grained and scalable data access control for PHRs, we leverage attribute-based encryption (ABE) techniques to encrypt each patient's PHR file. Different from previous works in secure data outsourcing, we focus on the multiple data owner scenario, and divide the users in the PHR system into multiple security domains that greatly reduces the key management complexity for owners and users. A high degree of patient privacy is guaranteed simultaneously by exploiting multiauthority ABE. Our scheme also enables dynamic modification of access policies or file attributes, supports efficient on-demand user/attribute revocation and break-glass access under emergency scenarios. Extensive analytical and experimental results are presented which show the security, scalability, and efficiency of our proposed scheme.
Comparison of attribute-based encryption schemes in securing healthcare systems

Redwan Walid,Karuna Pande Joshi,Seung Geol Choi

DOI: https://doi.org/10.1038/s41598-024-57692-w

IF: 4.6

2024-03-28

Scientific Reports

Abstract:E-health has become a top priority for healthcare organizations focused on advancing healthcare services. Thus, medical organizations have been widely adopting cloud services, resulting in the effective storage of sensitive data. To prevent privacy and security issues associated with the data, attribute-based encryption (ABE) has been a popular choice for encrypting private data. Likewise, the attribute-based access control (ABAC) technique has been widely adopted for controlling data access. Researchers have proposed electronic health record (EHR) systems using ABE techniques like ciphertext policy attribute-based encryption (CP-ABE), key policy attribute-based encryption (KP-ABE), and multi authority attribute-based encryption (MA-ABE). However, there is a lack of rigorous comparison among the various ABE schemes used in healthcare systems. To better understand the usability of ABE techniques in medical systems, we performed a comprehensive review and evaluation of the three popular ABE techniques by developing EHR systems using knowledge graphs with the same data but different encryption mechanisms. We have used the MIMIC-III dataset with varying record sizes for this study. This paper can help healthcare organizations or researchers using ABE in their systems to comprehend the correct usage scenario and the prospect of ABE deployment in the most recent technological evolution.

multidisciplinary sciences
Outsourcing multiauthority access control revocation and computations over medical data to mobile cloud

Arthur S. Voundi Koe,Qi Chen,Juan Tang,Shan Ai,Hongyang Yan,Shiwen Zhang,Duncan S. Wong

DOI: https://doi.org/10.1002/int.23009

IF: 8.993

2022-09-09

International Journal of Intelligent Systems

Abstract:With recent advances in cloud computing, mobile devices are increasingly being used to record patient physiological parameters, and transfer them to a cloud‐based hospital information system, for access control mediation over a variety of stakeholders. In such a cloud‐based architecture, the patient must specify an access policy for a group of authorized parties towards its outsourced data. Multiauthority ciphertext‐policy attribute‐based encryption (CP‐ABE) was provided as an innovative cloud‐based access control cryptographic primitive to tackle the key escrow issue in a centralized architecture, and boost flexibility through cross‐domain attributes management. Existing works, however, still have glaring drawbacks. First, they still rely on a trusted authority to generate and distribute user secret keys. Second, they do not simultaneously provide encryption, decryption, or revocation outsourcing, resulting in high processing and communication cost for both the data sender and the data receiver. Third, they do not support both user and attribute revocation, and the integrity of ciphertext downloaded from the cloud is not always verified at the user end. As a result, this paper exploits the dummy attribute technique and introduces a novel, efficient, and secure multiauthority ciphertext‐policy ABE method for mediating access control over medical data, in the mobile cloud. The ciphertext access policy enforcement, partial ciphertext decryption, and both the user and attribute indirect revocation updates are safely outsourced to the cloud server in this study. Theoretical analysis demonstrates that our scheme is efficient and verifiable, and we prove that our construction is secure under the decisional bilinear Diffie‐Hellman assumption.

computer science, artificial intelligence
Secure Data Sharing with Flexible User Access Privilege Update in Cloud-Assisted IoMT

Jialu Hao,Wenjuan Tang,Cheng Huang,Jian Liu,Huimei Wang,Ming Xian

DOI: https://doi.org/10.1109/tetc.2021.3052377

2022-01-01

IEEE Transactions on Emerging Topics in Computing

Abstract:Cloud-assisted Internet of Medical Things (IoMT) is becoming an emerging paradigm in the healthcare domain, which involves collection, storage and usage of the medical data. Considering the confidentiality and accessibility of the outsourced data, secure and fine-grained data sharing is a crucial requirement for the patients. Attribute-based encryption (ABE) is a promising solution to deal with this issue, but considering its property of each attribute sharing with multiple users, how to flexibly and efficiently update access privileges of certain users without affecting others is still a serious challenge. In this article, we propose a secure and fine-grained data sharing scheme with flexible user access privilege update in cloud-assisted IoMT environment. Specifically, we take ABE as the basic building block, and utilize proxy re-encryption and key blinding techniques to empower the cloud server to re-encrypt the ciphertext affected by revocation and update keys for unrevoked users. In addition, adding attributes for users to extend their access rights is realized only based on few key components stored in cloud without entirely re-computing and re-issuing keys for them. As a result, the patients are able to flexibly and efficiently share their data and manage users’ privileges. Formal proof and detailed performance evaluation demonstrate the security and efficiency of the proposed scheme.
An Efficient Ciphertext-Policy Weighted Attribute-Based Encryption for the Internet of Health Things

Hang Li,Keping Yu,Bin Liu,Chaosheng Feng,Zhiguang Qin,Gautam Srivastava

DOI: https://doi.org/10.1109/jbhi.2021.3075995

IF: 7.7

2021-01-01

IEEE Journal of Biomedical and Health Informatics

Abstract:The Internet of Health Things (IoHT) is a medical concept that describes uniquely identifiable devices connected to the Internet that can communicate with each other. As one of the most important components of smart health monitoring and improvement systems, the IoHT presents numerous challenges, among which cybersecurity is a priority. As a well-received security solution to achieve fine-grained access control, ciphertext-policy weighted attribute-based encryption (CP-WABE) has the potential to ensure data security in the IoHT. However, many issues remain, such as inflexibility, poor computational capability, and insufficient storage efficiency in attributes comparison. To address these issues, we propose a novel access policy expression method using 0-1 coding technology. Based on this method, a flexible and efficient CP-WABE is constructed for the IoHT. Our scheme supports not only weighted attributes but also any form of comparison of weighted attributes. Furthermore, we use offline/online encryption and outsourced decryption technology to ensure that the scheme can run on an inefficient IoT terminal. Both theoretical and experimental analyses show that our scheme is more efficient and feasible than other schemes. Moreover, security analysis indicates that our scheme achieves security against a chosen-plaintext attack.

computer science, interdisciplinary applications,mathematical & computational biology,medical informatics, information systems
Revocable and Traceable Undeniable Attribute-Based Encryption in Cloud-Enabled E-Health Systems

Zhongxiang He,Yuling Chen,Yun Luo,Lingyun Zhang,Yingying Tang

DOI: https://doi.org/10.3390/e26010045

IF: 2.738

2024-01-01

Entropy

Abstract:The emerging cloud storage technology has significantly improved efficiency and productivity in the traditional electronic healthcare field. However, it has also brought about many security concerns. Ciphertext policy attribute-based encryption (CP-ABE) holds immense potential in achieving fine-grained access control, providing robust security for electronic healthcare data in the cloud. However, current CP-ABE schemes still face issues such as inflexible attribute revocation, relatively lower computational capabilities, and key management. To address these issues, this paper introduces a revocable and traceable undeniable ciphertext policy attribute-based encryption scheme (MA-RUABE). MA-RUABE not only enables fast and accurate data traceability, effectively preventing malicious user key leakage, but also includes a direct revocation feature, significantly enhancing computational efficiency. Furthermore, the introduction of a multi-permission mechanism resolves the issue of centralization of power caused by single-attribute permissions. Furthermore, a security analysis demonstrates that our system ensures resilience against chosen plaintext attacks. Experimental results demonstrate that MA-RUABE incurs lower computational overhead, effectively enhancing system performance and ensuring data-sharing security in cloud-based electronic healthcare systems.

physics, multidisciplinary
A revocable attribute-based encryption EHR sharing scheme with multiple authorities in blockchain

Xiaohui Yang,Wenjie Li,Kai Fan

DOI: https://doi.org/10.1007/s12083-022-01387-4

2022-09-25

Abstract:With the development of digital healthcare, sharing electronic medical record data has become an indispensable part of improving medical conditions. Aiming at the centralized power caused by the single attribute authority in current CP-ABE schemes and the problem that cloud servers are curious and even malicious, we design a revocable CP-ABE EHR sharing scheme with multiple authorities (MA-RABE) in blockchain. In this solution, a group of authorities complete user attribute distribution, key generation and user management through secret sharing and transactions. Besides, we innovatively implemented a distributed one-way anonymous key agreement so that other participants cannot obtain useful information from the fully hidden policy embedded in the ciphertext. Taking into account the computational overhead of a large number of bilinear operations in the decryption process, the solution also supports the cloud server to pre-decrypt the ciphertext, and the data user only needs to perform exponentiation operation once to obtain the plaintext from the pre-decryption result. Theoretical analysis and performance evaluation show that the scheme has reliable security and lower user revocation and ciphertext update overhead.

computer science, information systems,telecommunications
Secure Access Control for Ehealth Data in Emergency Rescue Case Based on Traceable Attribute-Based Encryption

Yuan Shen,Wei Song,Changsheng Zhao,Zhiyong Peng

DOI: https://doi.org/10.1109/trustcom56396.2022.00037

2022-01-01

Abstract:With the development of cloud computing, patients can obtain efficient and high-quality medical services by uploading their eHealth data to the cloud for sharing among medical personnel. Because eHealth data contain lots of sensitive information, they are always encrypted before uploading to protect patients’ privacy. Ciphertext-policy attribute-based encryption (CP-ABE) is a commonly used cryptographic primitive since it achieves fine-grained and one-to-many access control on the encrypted data. However, encrypted eHealth data may become an obstacle for some healthcare scenarios, especially the emergency rescue scenes. In addition, the one-to-many access manner makes the traditional CP-ABE mechanism hard to track the identity of a traitor who sells the decryption privilege to others. In this paper, we propose an Emergency Access Control and Traceable (EmACT) attribute-based encryption scheme to address these issues. In addition, EmACT outsources the heavy bilinear computations of the decryption to the cloud, which means that EmACT is adaptable to the resource-constrained health-monitoring devices. The proposed scheme’s security is formally proven, and the experimental results demonstrate that EmACT is efficient and practicable.
An Efficient Blockchain-Based Access Control Framework for IoT-Healthcare System

Anu Raj,Shiva Prakash

DOI: https://doi.org/10.1007/s11277-024-11312-y

IF: 2.017

2024-06-26

Wireless Personal Communications

Abstract:Nowadays, the adoption of the Internet of Things (IoT) framework in various healthcare industries has increased rapidly in recent years. The IoT devices generate vast amounts of sensitive data, such as personal health information. It is mandatory to protect medical records from unauthorized access and use. However, the finite resources nature of these devices can make it hard to implement robust security measures, such as encryption and authentication. A blockchain is a propitious approach for the secure management of medical records in an immutable way. This problem can be resolved with ciphertext-policy attribute-based encryption (CP-ABE), which permits granular access control in IoT. The local gateways that are directly interfaced with the Ethereum blockchain-based smart contract platform are utilized to create and implement a distributed and dependable user authentication and an access control mechanism for IoMT. In this paper, a DBC-based CP-ABE approach offers a secure and decentralized solution for secure communication and data protection and provides a more secure and trustworthy system. The system works on the concept of an Elliptical Curve Cryptography-based CP-ABE method to reduce complexity and provide data security in remote patient monitoring. On the other hand, blockchain-based smart contracts offer a dynamic, optimal, and self-adjusted access control in smart healthcare systems. It lowers the overhead of conducting resource-intensive authentication procedures and blockchain communications at IoT devices. The result provides the efficiency of the proposed work in computation as well as processing time and its resistance to various security intrusions over existing schemes.

telecommunications
Early detection of retained surgical sponge by the lateral chest radiography.

M. Çolak,Hasan Kocatürk,F. Kızıltan,E. Bayram

2008-02-07

Abstract:
A Localized Bloom Filter-Based CP-ABE in Smart Healthcare

Krishna Priya Remamany,K. Maheswari,C Ramesh Babu Durai,N. K. Anushkannan,D. Rosy Salomi Victoria,Mohamed Tahar Ben Othman,Monia Hamdi,Habib Hamam

DOI: https://doi.org/10.3390/app122412720

2022-12-12

Applied Sciences

Abstract:Wearable technology-supported cloud-based smart health (s-health) has emerged as a promising answer to increase the efficiency and quality of healthcare as a result of rapid improvements in Internet of Things (IoT) technologies. However, the issues of data security and privacy preservation have not been fully resolved. In recent years, ciphertext policy attribute-based encryption (CP-ABE), which was developed as a versatile and potent cryptographic fundamental to accomplish one-to-many encryption with fine-grained access control, has been seen as a viable answer to the security issue in the cloud. The attribute values in the access policy, however, are supplied in cleartext in standard CP-ABE. This will conveniently reveal the data owners’ privacy (patients). Because the Internet of Things (IoT) in healthcare stores sensitive data in the cloud, security is crucial. The data must always be accessed via an access key when using traditional encryption techniques. Though the data cannot be accessed right away in an emergency, this offers greater security. The healthcare IoT created the break-glass concept to address this. The encryption technique is integrated with the broken glass idea to offer data protection and simple access in emergency scenarios. The majority of research papers employ cypher text policy attribute-based encryption (CP-ABE) with the broken glass idea to secure electronic health records. For improving data accessibility in the smart healthcare environment, modified cypher text policy attribute-based encryption (MCP-ABE) with the broken glass (BG) technique is suggested. Greater information security is achieved with this method, but the access policy is also dependent on keys that are vulnerable to hacking. To analyze the access policy individually throughout the key generation process, the attribute-based encryption procedure in this case uses the bloom filter. Information about the access policy is kept intact, which enhances the security of the keys. To continue serving patients and saving their lives, this modified CP-ABE is integrated with break glass in the smart healthcare facility. The experimental results demonstrated that, when compared to the lightweight break-glass procedure, the proposed solution is likewise the best in terms of decreased overhead. The main benefit of this strategy is that it uses the bloom filter concept in the MCP-ABE process, which protects the access policy attributes, to ensure that the key is never compromised. For data access in smart healthcare to preserve patients’ lives, the proposed MCP-ABE with broken glass is best.

materials science, multidisciplinary,engineering,chemistry,physics, applied
Advanced practice nurse directed transitional care reduced readmission or death in elderly patients admitted to hospital with heart failure

P. Griffiths

DOI: https://doi.org/10.1136/EBN.7.4.116

2004-09-24

Evidence-Based Nursing

Abstract:Naylor MD, Brooten DA, Campbell RL, et al . Transitional care of older adults hospitalized with heart failure: a randomized, controlled trial. J Am Geriatr Soc 2004;52:675–84. [OpenUrl][1][CrossRef][2][PubMed][3][Web of Science][4]   Q In elderly patients admitted to hospital with heart failure (HF), does a 3 month, comprehensive, transitional care intervention reduce readmissions and improve quality of life and functioning? ### ![Graphic][5] Design: randomised controlled trial. ### ![Graphic][6] Allocation: {concealed}.* ### ![Graphic][7] Blinding: blinded {data collectors}.* ### ![Graphic][8] Follow up period: 1 year after index hospital admission. ### ![Graphic][9] Setting: 6 academic and community hospitals in Philadelphia, Pennsylvania, USA. ### ![Graphic][10] Patients: 239 English speaking patients ⩾65 years of age (mean age 76 y, 57% women) who were admitted to hospital from home with HF, alert and oriented, reachable by telephone, and residing ⩽60 miles from the admitting hospital. Exclusion criterion was end stage renal disease. ### ![Graphic][11] Intervention: advanced practice nurse (APN) transitional care (TC) (n = 118) or usual care (n = 121). APN TC comprised (1) APN training by a multidisciplinary team; (2) Quality-Cost Model of APN Transitional Care management strategies (identification of patient and caregiver goals, individualised care plans, educational and behavioural strategies, coordination and continuity of … [1]: {openurl}?query=rft.jtitle%253DJournal%2Bof%2Bthe%2BAmerican%2BGeriatrics%2BSociety%26rft.stitle%253DJ%2BAm%2BGeriatr%2BSoc%26rft.aulast%253DNaylor%26rft.auinit1%253DM.%2BD.%26rft.volume%253D52%26rft.issue%253D5%26rft.spage%253D675%26rft.epage%253D684%26rft.atitle%253DTransitional%2Bcare%2Bof%2Bolder%2Badults%2Bhospitalized%2Bwith%2Bheart%2Bfailure%253A%2Ba%2Brandomized%252C%2Bcontrolled%2Btrial.%26rft_id%253Dinfo%253Adoi%252F10.1111%252Fj.1532-5415.2004.52202.x%26rft_id%253Dinfo%253Apmid%252F15086645%26rft.genre%253Darticle%26rft_val_fmt%253Dinfo%253Aofi%252Ffmt%253Akev%253Amtx%253Ajournal%26ctx_ver%253DZ39.88-2004%26url_ver%253DZ39.88-2004%26url_ctx_fmt%253Dinfo%253Aofi%252Ffmt%253Akev%253Amtx%253Actx [2]: /lookup/external-ref?access_num=10.1111/j.1532-5415.2004.52202.x&link_type=DOI [3]: /lookup/external-ref?access_num=15086645&link_type=MED&atom=%2Febnurs%2F7%2F4%2F116.atom [4]: /lookup/external-ref?access_num=000220855300003&link_type=ISI [5]: /embed/inline-graphic-1.gif [6]: /embed/inline-graphic-2.gif [7]: /embed/inline-graphic-3.gif [8]: /embed/inline-graphic-4.gif [9]: /embed/inline-graphic-5.gif [10]: /embed/inline-graphic-6.gif [11]: /embed/inline-graphic-7.gif
Flexibly expressive and revocable multi-authority KP-ABE scheme from RLWE for Internet of Medical Things

Shuwei Xie,Leyou Zhang,Qing Wu,Fatemeh Rezaeibagha

DOI: https://doi.org/10.1016/j.sysarc.2024.103179

IF: 5.836

2024-05-19

Journal of Systems Architecture

Abstract:The emergence of the Internet of Medical Things (IoMT) has presented numerous opportunities for the healthcare industry. It is anticipated to enhance the quality and efficiency of medical services, thus enhancing people's overall quality of life. However, frequently occurring medical data leakage makes the protection of medical data and privacy in IoMT become a critical issue. Among the solutions, attribute-based encryption (ABE) has been a very promising solution due to its flexible and fine-grained access control to encrypted data. However, the majority of current ABE schemes are based on bilinear pairing and are vulnerable to quantum attacks. The available of multi-authority ABE schemes over lattice only support a single policy such as threshold or AND gate, and lack the ability to implement user or attribute revocation in a flexible manner. For the special algebra structure of the lattice based scheme, how to overcome them is still a challenge at present. Aiming at the above, we propose a novel multi-authority key-policy attribute based encryption (RM-KP-ABE) based on the Ring Learning With Errors (RLWE) assumption. It supports multi-valued attributes and {0,1} -LSSS access policy. This scheme allows multiple authorities to participate in key distribution and enables attribute revocation when dynamic users change their situation. {0,1} -LSSS access policy makes the proposal get highly expressive which supports any monotonic boolean formula. Security analysis and performance evaluations demonstrate that our scheme is secure and efficient.

computer science, software engineering, hardware & architecture
A robust and lightweight secure access scheme for cloud based E-healthcare services

Mehedi Masud,Gurjot Singh Gaba,Karanjeet Choudhary,Roobaea Alroobaea,M Shamim Hossain

DOI: https://doi.org/10.1007/s12083-021-01162-x

Abstract:Traditional healthcare services have transitioned into modern healthcare services where doctors remotely diagnose the patients. Cloud computing plays a significant role in this change by providing easy access to patients' medical records to all stakeholders, such as doctors, nurses, patients, life insurance agents, etc. Cloud services are scalable, cost-effective, and offer a broad range of mobile access to patients' electronic health record (EHR). Despite the cloud's enormous benefits like real-time data access, patients' EHR security and privacy are major concerns. Since the information about patients' health is highly sensitive and crucial, sharing it over the unsecured wireless medium brings many security challenges such as eavesdropping, modifications, etc. Considering the security needs of remote healthcare, this paper proposes a robust and lightweight, secure access scheme for cloud-based E-healthcare services. The proposed scheme addresses the potential threats to E-healthcare by providing a secure interface to stakeholders and prohibiting unauthorized users from accessing information stored in the cloud. The scheme makes use of multiple keys formed through the key derivation function (KDF) to ensure end-to-end ciphering of information for preventing misuse. The rights to access the cloud services are provided based on the identity and the association between stakeholders, thus ensuring privacy. Due to its simplicity and robustness, the proposed scheme is the best fit for protecting data security and privacy in cloud-based E-healthcare services.
Blockchain-assisted searchable attribute-based encryption for e-health systems

Xinyin Xiang,Xingwen Zhao

DOI: https://doi.org/10.1016/j.sysarc.2022.102417

IF: 5.836

2022-03-01

Journal of Systems Architecture

Abstract:The Internet of Things (IoT) is becoming increasingly popular for transmitting massive data in a network. With a limited supply of IoT devices, utilizing cloud storage is considered to be an optimal way of processing data. Although cloud computing provides an efficient means of data storage and secure sharing in resource-limited devices, it is still a challenge to enable end users to publish search queries and implement fine-grained access control over a ciphertext at the same time. Blockchain-assisted searchable attribute-based encryption (SABE) can achieve data confidentiality and fine-grained access control. In our work, we present blockchain-assisted SABE for e-health systems. Our framework not only combines the advantages of attribute-based encryption (ABE) and blockchain technology but also supports hidden policies. A rigorous security proof shows that our scheme can achieve the known security under a chosen keyword attack. An experiment indicates that the proposal is suitable for e-health systems.

computer science, software engineering, hardware & architecture
EVOAC-HP: An Efficient and Verifiable Outsourced Access Control Scheme with Hidden Policy

Haobin Ma,Dehua Zhou,Peng Li,Xiaoming Wang

DOI: https://doi.org/10.3390/s23094384

IF: 3.9

2023-04-28

Sensors

Abstract:As medical data become increasingly important in healthcare, it is crucial to have proper access control mechanisms, ensuring that sensitive data are only accessible to authorized users while maintaining privacy and security. Ciphertext-Policy Attribute-Based Encryption (CP-ABE) is an attractive access control solution that can offer effective, fine-grained and secure medical data sharing, but it has two major drawbacks: Firstly, decryption is computationally expensive for resource-limited data users, especially when the access policy has many attributes, limiting its use in large-scale data-sharing scenarios. Secondly, existing schemes are based on data users’ attributes, which can potentially reveal sensitive information about the users, especially in healthcare data sharing, where strong privacy and security are essential. To address these issues, we designed an improved CP-ABE scheme that provides efficient and verifiable outsourced access control with fully hidden policy named EVOAC-HP. In this paper, we utilize the attribute bloom filter to achieve policy hiding without revealing user privacy. For the purpose of alleviating the decryption burden for data users, we also adopt the technique of outsourced decryption to outsource the heavy computation overhead to the cloud service provider (CSP) with strong computing and storage capabilities, while the transformed ciphertext results can be verified by the data user. Finally, with rigorous security and reliable performance analysis, we demonstrate that EVOAC-HP is both practical and effective with robust privacy protection.

engineering, electrical & electronic,chemistry, analytical,instruments & instrumentation
FATE: flexible attribute-based traceable encrypted data sharing scheme using smart contracts in wireless medical sensor networks

Rathee, Geetanjali

DOI: https://doi.org/10.1007/s12243-024-01038-0

2024-04-19

Annals of Telecommunications

Abstract:Given the adaptability and effectiveness of the smart health sector, it has gained much momentum in the last few years, particularly during the COVID-19 pandemic. However, the security and privacy of data sent through a public communication channel are gravely threatened by adopting cloud services for data sharing. The security and privacy of the data are also in jeopardy, as the owners lose full ownership of the material once it is uploaded to the cloud. In recent years, ciphertext policy attribute-based encryption (CP-ABE) has shown great potential as a privacy-preserving encryption mechanism. In this paper, a decentralized method of large-scale data storage has been introduced using the interplanetary file system (IPFS), thereby eliminating the issue of centralized storage and frequent data unavailability. A reliable third-party hospital node in a secure environment is adopted in the proposed model to guarantee data integrity and to reduce the load on the resource-constrained devices of the user. Simulation using the Charm-Crypto framework and Pairing-Based Cryptography library using the SS512 curve proves its performance and efficiency. The proposed scheme's encryption time is constant at 46.96 ms regardless of the size of the attribute set, the key generation time is reduced by 79.09%, and the storage overhead is reduced by 71.3% as compared to the existing schemes.

telecommunications

Cognitive impairment associated with intraoperative and postoperative hypoperfusion without neurologic deficits in a patient undergoing carotid endarterectomy.

An Access Control Scheme With Privacy-Preserving Authentication and Flexible Revocation for Smart Healthcare

Mh-abe: multi-authority and hierarchical attribute based encryption scheme for secure electronic health record sharing

Efficient Anonymous Certificate-Based Multi- Message and Multi-Receiver Signcryption Scheme for Healthcare Internet of Things.

Scalable and Secure Sharing of Personal Health Records in Cloud Computing Using Attribute-Based Encryption

Comparison of attribute-based encryption schemes in securing healthcare systems

Outsourcing multiauthority access control revocation and computations over medical data to mobile cloud

Secure Data Sharing with Flexible User Access Privilege Update in Cloud-Assisted IoMT

An Efficient Ciphertext-Policy Weighted Attribute-Based Encryption for the Internet of Health Things

Revocable and Traceable Undeniable Attribute-Based Encryption in Cloud-Enabled E-Health Systems

A revocable attribute-based encryption EHR sharing scheme with multiple authorities in blockchain

Secure Access Control for Ehealth Data in Emergency Rescue Case Based on Traceable Attribute-Based Encryption

An Efficient Blockchain-Based Access Control Framework for IoT-Healthcare System

Early detection of retained surgical sponge by the lateral chest radiography.

A Localized Bloom Filter-Based CP-ABE in Smart Healthcare

Advanced practice nurse directed transitional care reduced readmission or death in elderly patients admitted to hospital with heart failure

Flexibly expressive and revocable multi-authority KP-ABE scheme from RLWE for Internet of Medical Things

A robust and lightweight secure access scheme for cloud based E-healthcare services

Blockchain-assisted searchable attribute-based encryption for e-health systems

EVOAC-HP: An Efficient and Verifiable Outsourced Access Control Scheme with Hidden Policy

FATE: flexible attribute-based traceable encrypted data sharing scheme using smart contracts in wireless medical sensor networks