Abstract:With continuous advancements in Internet technology and the increased use of cryptographic techniques, the cloud has become the obvious choice for data sharing. Generally, the data are outsourced to cloud storage servers in encrypted form. Access control methods can be used on encrypted outsourced data to facilitate and regulate access. Multi-authority attribute-based encryption is a propitious technique to control who can access encrypted data in inter-domain applications such as sharing data between organizations, sharing data in healthcare, etc. The data owner may require the flexibility to share the data with known and unknown users. The known or closed-domain users may be internal employees of the organization, and unknown or open-domain users may be outside agencies, third-party users, etc. In the case of closed-domain users, the data owner becomes the key issuing authority, and in the case of open-domain users, various established attribute authorities perform the task of key issuance. Privacy preservation is also a crucial requirement in cloud-based data-sharing systems. This work proposes the SP-MAACS scheme, a secure and privacy-preserving multi-authority access control system for cloud-based healthcare data sharing. Both open and closed domain users are considered, and policy privacy is ensured by only disclosing the names of policy attributes. The values of the attributes are kept hidden. Characteristic comparison with similar existing schemes shows that our scheme simultaneously provides features such as multi-authority setting, expressive and flexible access policy structure, privacy preservation, and scalability. The performance analysis carried out by us shows that the decryption cost is reasonable enough. Furthermore, the scheme is demonstrated to be adaptively secure under the standard model.

Time-limited ownership delegation scheme with revocation security for healthcare

A Dual Privacy-Preservation Scheme for Cloud-Based Ehealth Systems

Untouchable Once Revoking: A Practical and Secure Dynamic EHR Sharing System Via Cloud

Certificateless Provable Data Possession Scheme for Cloud-Based Electronic Health Records System

A Blockchain and CP-ABE Based Access Control Scheme with Fine-Grained Revocation of Attributes in Cloud Health

Lightweight, Verifiable and Revocable EHRs Sharing with Fine-Grained Bilateral Access Control

An Access Control Scheme With Privacy-Preserving Authentication and Flexible Revocation for Smart Healthcare

Outsourcing multiauthority access control revocation and computations over medical data to mobile cloud

Revocable certificateless proxy re-signature with signature evolution for EHR sharing systems

Efficient Outsourced Data Access Control with User Revocation for Cloud-Based IoT

A blockchain-based scheme for privacy-preserving and secure sharing of medical data

Patient-centered Cross-Enterprise Document Sharing and Dynamic Consent Framework Using Consortium Blockchain and Ciphertext-Policy Attribute-Based Encryption

Attribute-based Encryption with Non-Monotonic Access Structures Supporting Fine-Grained Attribute Revocation in M-healthcare.

Patient-centric medical service matching with fine-grained access control and dynamic user management

Secured and Privacy-Preserving Multi-Authority Access Control System for Cloud-Based Healthcare Data Sharing

Secure and Efficient Cloud Data Deduplication with Ownership Management

Secure medical data sharing scheme based on traceable ring signature and blockchain

A Secure EMR Sharing System with Tamper Resistance and Expressive Access Control

A Secure and Efficient Data Sharing Framework with Delegated Capabilities in Hybrid Cloud

MDS2-C3PF: A Medical Data Sharing Scheme with Cloud-Chain Cooperation and Policy Fusion in IoT

MD-S3C3