|2/2017 - 5|
Hybrid Solution for Privacy-Preserving Access Control for Healthcare DataSMITHAMOL, M. B. , RAJESWARI, S.
|View the paper record and citations in|
|Click to see author's profile in SCOPUS, IEEE Xplore, Web of Science|
|Download PDF (1,342 KB) | Citation | Downloads: 1,072 | Views: 2,703|
data privacy, electronic medical records, internet of things, cloud, access control
encryption(11), cloud(10), attribute(9), security(7), secure(7), data(7), control(6), privacy(5), policy(5), grained(5)
Blue keywords are present in both the references section and the paper title.
About this article
Date of Publication: 2017-05-31
Volume 17, Issue 2, Year 2017, On page(s): 31 - 38
ISSN: 1582-7445, e-ISSN: 1844-7600
Digital Object Identifier: 10.4316/AECE.2017.02005
Web of Science Accession Number: 000405378100005
SCOPUS ID: 85020138510
The booming in cloud and IoT technologies has accelerated the growth of healthcare system. The IoT devices monitor the patient's health, and upload collected data as Electronic Medical Records (EMRs) to the cloud for storage and sharing. Outsourcing EMRs to the cloud introduce new security and privacy challenges. In this paper, we proposed a novel architecture ensuring security and privacy for the outsourced health records. The proposed model uses partially ordered set (POSET) for constructing the group based access structure and Ciphertext-Policy Attribute-Based Encryption (CP-ABE) to provide fine-grained EMR access control. The modified group based CP-ABE (G-CP-ABE) minimizes the computational overhead by reducing the number of leaf nodes in the access tree. Also, the proposed G-CP-ABE framework merges symmetric encryption and CP-ABE scheme to minimize the overall encryption time. As a result, G-CP-ABE can be used to monitor health conditions even from a resource constrained IoT device. The performance analysis shows the efficiency of the proposed model, making it suitable for practical use.
|References|||||Cited By «-- Click to see who has cited this paper|
| I. Ungurean, N.C. Gaitan, and V. G. Gaitan, "An IoT architecture for things from industrial environment," in In Communications (COMM), 2014 10th International Conference on, 2014, pp. 14. |
[CrossRef] [Web of Science Times Cited 59] [SCOPUS Times Cited 73]
 P.M. Mell and T. Grance, "The NIST Definition of Cloud Computing," National Institute of Standards and Technology, Gaithersburg, MD, NIST SP 800-145, 2011.
 Q. Zhang, L. Cheng, and R. Boutaba, "Cloud Computing: State-of-the-art and Research Challenges," J. Internet Serv. Appl., vol. 1, no. 1, pp. 718, May 2010.
[CrossRef] [SCOPUS Times Cited 2359]
 G. Corotinschi and V. G. Gaitan, "Smart cities become possible thanks to the Internet of Things," In System Theory, Control and Computing (ICSTCC), 19th International Conference on, IEEE, 2015, pp. 291296.
[CrossRef] [SCOPUS Times Cited 6]
 Y. Lee, P. Kim, and Y. Park, "Secure Multi-Keyword Search with User/Owner-side Efficiency in the Cloud," Adv. Electr. Comput. Eng.,vol. 16, no. 2, pp. 1118, 2016.
[CrossRef] [Full Text] [Web of Science Times Cited 1] [SCOPUS Times Cited 1]
 J. L. Fernández-Alemán, I. C. Señor, P. Á. O. Lozoya, and A. Toval, "Security and Privacy in Electronic Health Records: A systematic literature review," J. Biomed. Inform., vol. 46, no. 3, pp. 541562, June 2013.
[CrossRef] [Web of Science Times Cited 312] [SCOPUS Times Cited 401]
 A. Sahai and B. Waters, "Fuzzy Identity-Based Encryption," in Advances in Cryptology EUROCRYPT 2005, vol. 3494, Springer Berlin Heidelberg, 2005, pp. 457473.
[CrossRef] [Web of Science Times Cited 2384] [SCOPUS Times Cited 3109]
 V. Goyal, O. Pandey, A. Sahai, and B. Waters, "Attribute-based Encryption for Fine-grained Access Control of Encrypted Data," In Proceedings of the 13th ACM conference on Computer and communications security,2006, pp.89
[CrossRef] [SCOPUS Times Cited 3695]
 J. Bethencourt, A. Sahai, and B. Waters, "Ciphertext-Policy Attribute-Based Encryption," In Security and Privacy, 2007. SP'07. IEEE Symposium on, 2007, pp. 321334.
[CrossRef] [Web of Science Times Cited 2464] [SCOPUS Times Cited 3645]
 S. Yu, C. Wang, K. Ren, and W. Lou, "Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing," Proceedings,IEEE2010,pp.19.
[CrossRef] [Web of Science Times Cited 846] [SCOPUS Times Cited 1256]
 F. Han, J. Qin, H. Zhao, and J. Hu, "A general Transformation from KP-ABE to Searchable Encryption," Future Gener. Comput. Syst., vol. 30, pp. 107115, Jan. 2014.
[CrossRef] [Web of Science Times Cited 44] [SCOPUS Times Cited 56]
 L. Touati and Y. Challal, "Collaborative KP-ABE for cloud-based Internet of Things applications,"In Communications(ICC), IEEE 2016, pp. 17.
[CrossRef] [Web of Science Times Cited 12] [SCOPUS Times Cited 27]
 L. Cheung and C. Newport, "Provably secure ciphertext policy ABE," Proceedings of 14th ACM on Computer and communications Security,2007,pp.456-465.
[CrossRef] [SCOPUS Times Cited 682]
 V. Goyal, A. Jain, O. Pandey, and A. Sahai, "Bounded Ciphertext Policy Attribute Based Encryption," in Automata, Languages and Programming, vol. 5126, Springer Berlin Heidelberg, 2008, pp. 579591.
[CrossRef] [SCOPUS Times Cited 426]
 G. Wang, Q. Liu, and J. Wu, "Hierarchical attribute-based encryption for fine-grained access control in cloud storage services," In Proceedings of 17th ACM on Computer and communications security, 2010. pp.735-737,
[CrossRef] [Web of Science Times Cited 176] [SCOPUS Times Cited 376]
 B. Waters, "Ciphertext-Policy Attribute-Based Encryption: An Expressive, Efficient, and Provably Secure Realization," in Public Key Cryptography PKC 2011, vol. 6571, Springer Berlin Heidelberg, 2011, pp. 5370.
[CrossRef] [Web of Science Times Cited 1013] [SCOPUS Times Cited 1285]
 Fuchun Guo, Yi Mu, W. Susilo, D. S. Wong, and V. Varadharajan, "CP-ABE With Constant-Size Keys for Lightweight Devices," IEEE Trans. Inf. Forensics Secur., vol. 9, no. 5, pp. 763771, May 2014.
[CrossRef] [Web of Science Times Cited 98] [SCOPUS Times Cited 121]
 J. Li, W. Yao, J. Han, Y. Zhang, and J. Shen, "User Collusion Avoidance CP-ABE with Efficient Attribute Revocation for Cloud Storage," IEEE Syst. Journal., pp. 111, 2017.
[CrossRef] [Web of Science Times Cited 117] [SCOPUS Times Cited 144]
 S. Alshehri, S. P. Radziszowski, and R. K. Raj, "Secure Access for Healthcare Data in the Cloud Using Ciphertext-Policy Attribute-Based Encryption," In Data Engineering Workshops (ICDEW), IEEE, 2012., pp. 143146.
[CrossRef] [SCOPUS Times Cited 61]
 M. Li, W. Lou, and K. Ren, "Data security and privacy in wireless body area networks," IEEE Wirel. Commun., vol. 17, no. 1, pp. 5158, Feb. 2010.
[CrossRef] [SCOPUS Times Cited 456]
 J. A. Akinyele, M. W. Pagano, M. D. Green, C. U. Lehmann, Z. N. J. Peterson, and A. D. Rubin, "Securing Electronic Medical Records using Attribute-based Encryption on Mobile Devices," Proceedings of ACM workshop on Security and privacy in smartphones and mobile devices, 2011, pp. 75-86.
[CrossRef] [SCOPUS Times Cited 103]
 B. Fabian, T. Ermakova, and P. Junghanns, "Collaborative and Secure Sharing of Healthcare Data in Multi-Clouds," Inf. Syst., vol. 48, pp. 132150, Mar. 2015.
[CrossRef] [Web of Science Times Cited 123] [SCOPUS Times Cited 162]
 J. J. Yang, J. Q. Li, and Y. Niu, "A hybrid Solution for Privacy Preserving Medical Data Sharing in the Cloud Environment," Future Gener. Comput. Syst., vol. 4344, pp. 7486, Feb. 2015.
[CrossRef] [Web of Science Times Cited 160] [SCOPUS Times Cited 215]
 C. Guo, R. Zhuang, Y. Jie, Y. Ren, T. Wu, and K.-K. R. Choo, "Fine-grained Database Field Search Using Attribute-Based Encryption for E-Healthcare Clouds," J. Med. Syst., vol. 40, no. 11, Nov. 2016.
[CrossRef] [Web of Science Times Cited 63] [SCOPUS Times Cited 80]
 Y. Liu, Y. Zhang, J. Ling, and Z. Liu, "Secure and Fine-grained Access Control on e-healthcare Records in Mobile Cloud Computing," Future Gener. Comput. Syst., Jan. 2017.
[CrossRef] [Web of Science Times Cited 75] [SCOPUS Times Cited 85]
 E. A. Bossanyi, "Wind Turbine Control for Load Reduction," Wind Energy, vol. 6, no. 3, pp. 229244, Jul. 2003
[CrossRef] [Web of Science Times Cited 104] [SCOPUS Times Cited 392]
 R. E. Precup and S. Preitl, "Optimisation criteria in development of fuzzy controllers with dynamics," Eng. Appl. Artif. Intell., vol. 17, no. 6, pp. 661674, Sep. 2004.
[CrossRef] [Web of Science Times Cited 55] [SCOPUS Times Cited 72]
 M. A. Ramírez-Ortegón, V. Märgner, E. Cuevas, and R. Rojas, "An optimization for binarization methods by removing binary artifacts," Pattern Recognit. Lett., vol. 34, no. 11, pp. 12991306, Aug. 2013
[CrossRef] [Web of Science Times Cited 11] [SCOPUS Times Cited 23]
 S. B. Ghosn, F. Drouby, and H. M. Harmanani, "A Parallel Genetic Algorithm for the Open-Shop Scheduling Problem Using Deterministic and Random Moves," Int. J. Artif. Intell., vol. 14, no. 1, pp. 130144, 2016.
 D. Boneh and M. Franklin, "Identity-Based Encryption from the Weil Pairing," in Advances in Cryptology CRYPTO 2001, vol. 2139, Springer Berlin Heidelberg, 2001, pp. 213229.
[CrossRef] [SCOPUS Times Cited 5539]
Web of Science® Citations for all references: 8,117 TCR
SCOPUS® Citations for all references: 24,850 TCR
Web of Science® Average Citations per reference: 254 ACR
SCOPUS® Average Citations per reference: 777 ACR
TCR = Total Citations for References / ACR = Average Citations per Reference
We introduced in 2010 - for the first time in scientific publishing, the term "References Weight", as a quantitative indication of the quality ... Read more
Citations for references updated on 2022-11-29 19:03 in 280 seconds.
Note1: Web of Science® is a registered trademark of Clarivate Analytics.
Note2: SCOPUS® is a registered trademark of Elsevier B.V.
Disclaimer: All queries to the respective databases were made by using the DOI record of every reference (where available). Due to technical problems beyond our control, the information is not always accurate. Please use the CrossRef link to visit the respective publisher site.
Faculty of Electrical Engineering and Computer Science
Stefan cel Mare University of Suceava, Romania
All rights reserved: Advances in Electrical and Computer Engineering is a registered trademark of the Stefan cel Mare University of Suceava. No part of this publication may be reproduced, stored in a retrieval system, photocopied, recorded or archived, without the written permission from the Editor. When authors submit their papers for publication, they agree that the copyright for their article be transferred to the Faculty of Electrical Engineering and Computer Science, Stefan cel Mare University of Suceava, Romania, if and only if the articles are accepted for publication. The copyright covers the exclusive rights to reproduce and distribute the article, including reprints and translations.
Permission for other use: The copyright owner's consent does not extend to copying for general distribution, for promotion, for creating new works, or for resale. Specific written permission must be obtained from the Editor for such copying. Direct linking to files hosted on this website is strictly prohibited.
Disclaimer: Whilst every effort is made by the publishers and editorial board to see that no inaccurate or misleading data, opinions or statements appear in this journal, they wish to make it clear that all information and opinions formulated in the articles, as well as linguistic accuracy, are the sole responsibility of the author.