|2/2017 - 5|
Hybrid Solution for Privacy-Preserving Access Control for Healthcare DataSMITHAMOL, M. B. , RAJESWARI, S.
|View the paper record and citations in|
|Click to see author's profile in SCOPUS, IEEE Xplore, Web of Science|
|Download PDF (1,342 KB) | Citation | Downloads: 1,058 | Views: 2,643|
data privacy, electronic medical records, internet of things, cloud, access control
encryption(11), cloud(10), attribute(9), security(7), secure(7), data(7), control(6), privacy(5), policy(5), grained(5)
Blue keywords are present in both the references section and the paper title.
About this article
Date of Publication: 2017-05-31
Volume 17, Issue 2, Year 2017, On page(s): 31 - 38
ISSN: 1582-7445, e-ISSN: 1844-7600
Digital Object Identifier: 10.4316/AECE.2017.02005
Web of Science Accession Number: 000405378100005
SCOPUS ID: 85020138510
The booming in cloud and IoT technologies has accelerated the growth of healthcare system. The IoT devices monitor the patient's health, and upload collected data as Electronic Medical Records (EMRs) to the cloud for storage and sharing. Outsourcing EMRs to the cloud introduce new security and privacy challenges. In this paper, we proposed a novel architecture ensuring security and privacy for the outsourced health records. The proposed model uses partially ordered set (POSET) for constructing the group based access structure and Ciphertext-Policy Attribute-Based Encryption (CP-ABE) to provide fine-grained EMR access control. The modified group based CP-ABE (G-CP-ABE) minimizes the computational overhead by reducing the number of leaf nodes in the access tree. Also, the proposed G-CP-ABE framework merges symmetric encryption and CP-ABE scheme to minimize the overall encryption time. As a result, G-CP-ABE can be used to monitor health conditions even from a resource constrained IoT device. The performance analysis shows the efficiency of the proposed model, making it suitable for practical use.
|References|||||Cited By «-- Click to see who has cited this paper|
| I. Ungurean, N.C. Gaitan, and V. G. Gaitan, "An IoT architecture for things from industrial environment," in In Communications (COMM), 2014 10th International Conference on, 2014, pp. 14. |
[CrossRef] [Web of Science Times Cited 59] [SCOPUS Times Cited 72]
 P.M. Mell and T. Grance, "The NIST Definition of Cloud Computing," National Institute of Standards and Technology, Gaithersburg, MD, NIST SP 800-145, 2011.
 Q. Zhang, L. Cheng, and R. Boutaba, "Cloud Computing: State-of-the-art and Research Challenges," J. Internet Serv. Appl., vol. 1, no. 1, pp. 718, May 2010.
[CrossRef] [SCOPUS Times Cited 2341]
 G. Corotinschi and V. G. Gaitan, "Smart cities become possible thanks to the Internet of Things," In System Theory, Control and Computing (ICSTCC), 19th International Conference on, IEEE, 2015, pp. 291296.
[CrossRef] [SCOPUS Times Cited 6]
 Y. Lee, P. Kim, and Y. Park, "Secure Multi-Keyword Search with User/Owner-side Efficiency in the Cloud," Adv. Electr. Comput. Eng.,vol. 16, no. 2, pp. 1118, 2016.
[CrossRef] [Full Text] [Web of Science Times Cited 1] [SCOPUS Times Cited 1]
 J. L. Fernández-Alemán, I. C. Señor, P. Á. O. Lozoya, and A. Toval, "Security and Privacy in Electronic Health Records: A systematic literature review," J. Biomed. Inform., vol. 46, no. 3, pp. 541562, June 2013.
[CrossRef] [Web of Science Times Cited 307] [SCOPUS Times Cited 394]
 A. Sahai and B. Waters, "Fuzzy Identity-Based Encryption," in Advances in Cryptology EUROCRYPT 2005, vol. 3494, Springer Berlin Heidelberg, 2005, pp. 457473.
[CrossRef] [Web of Science Times Cited 2323] [SCOPUS Times Cited 3065]
 V. Goyal, O. Pandey, A. Sahai, and B. Waters, "Attribute-based Encryption for Fine-grained Access Control of Encrypted Data," In Proceedings of the 13th ACM conference on Computer and communications security,2006, pp.89
[CrossRef] [SCOPUS Times Cited 3643]
 J. Bethencourt, A. Sahai, and B. Waters, "Ciphertext-Policy Attribute-Based Encryption," In Security and Privacy, 2007. SP'07. IEEE Symposium on, 2007, pp. 321334.
[CrossRef] [Web of Science Times Cited 2413] [SCOPUS Times Cited 3587]
 S. Yu, C. Wang, K. Ren, and W. Lou, "Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing," Proceedings,IEEE2010,pp.19.
[CrossRef] [Web of Science Times Cited 837] [SCOPUS Times Cited 1243]
 F. Han, J. Qin, H. Zhao, and J. Hu, "A general Transformation from KP-ABE to Searchable Encryption," Future Gener. Comput. Syst., vol. 30, pp. 107115, Jan. 2014.
[CrossRef] [Web of Science Times Cited 42] [SCOPUS Times Cited 56]
 L. Touati and Y. Challal, "Collaborative KP-ABE for cloud-based Internet of Things applications,"In Communications(ICC), IEEE 2016, pp. 17.
[CrossRef] [Web of Science Times Cited 11] [SCOPUS Times Cited 23]
 L. Cheung and C. Newport, "Provably secure ciphertext policy ABE," Proceedings of 14th ACM on Computer and communications Security,2007,pp.456-465.
[CrossRef] [SCOPUS Times Cited 677]
 V. Goyal, A. Jain, O. Pandey, and A. Sahai, "Bounded Ciphertext Policy Attribute Based Encryption," in Automata, Languages and Programming, vol. 5126, Springer Berlin Heidelberg, 2008, pp. 579591.
[CrossRef] [SCOPUS Times Cited 423]
 G. Wang, Q. Liu, and J. Wu, "Hierarchical attribute-based encryption for fine-grained access control in cloud storage services," In Proceedings of 17th ACM on Computer and communications security, 2010. pp.735-737,
[CrossRef] [Web of Science Times Cited 173] [SCOPUS Times Cited 372]
 B. Waters, "Ciphertext-Policy Attribute-Based Encryption: An Expressive, Efficient, and Provably Secure Realization," in Public Key Cryptography PKC 2011, vol. 6571, Springer Berlin Heidelberg, 2011, pp. 5370.
[CrossRef] [Web of Science Times Cited 979] [SCOPUS Times Cited 1262]
 Fuchun Guo, Yi Mu, W. Susilo, D. S. Wong, and V. Varadharajan, "CP-ABE With Constant-Size Keys for Lightweight Devices," IEEE Trans. Inf. Forensics Secur., vol. 9, no. 5, pp. 763771, May 2014.
[CrossRef] [Web of Science Times Cited 96] [SCOPUS Times Cited 119]
 J. Li, W. Yao, J. Han, Y. Zhang, and J. Shen, "User Collusion Avoidance CP-ABE with Efficient Attribute Revocation for Cloud Storage," IEEE Syst. Journal., pp. 111, 2017.
[CrossRef] [Web of Science Times Cited 109] [SCOPUS Times Cited 139]
 S. Alshehri, S. P. Radziszowski, and R. K. Raj, "Secure Access for Healthcare Data in the Cloud Using Ciphertext-Policy Attribute-Based Encryption," In Data Engineering Workshops (ICDEW), IEEE, 2012., pp. 143146.
[CrossRef] [SCOPUS Times Cited 60]
 M. Li, W. Lou, and K. Ren, "Data security and privacy in wireless body area networks," IEEE Wirel. Commun., vol. 17, no. 1, pp. 5158, Feb. 2010.
[CrossRef] [SCOPUS Times Cited 453]
 J. A. Akinyele, M. W. Pagano, M. D. Green, C. U. Lehmann, Z. N. J. Peterson, and A. D. Rubin, "Securing Electronic Medical Records using Attribute-based Encryption on Mobile Devices," Proceedings of ACM workshop on Security and privacy in smartphones and mobile devices, 2011, pp. 75-86.
[CrossRef] [SCOPUS Times Cited 102]
 B. Fabian, T. Ermakova, and P. Junghanns, "Collaborative and Secure Sharing of Healthcare Data in Multi-Clouds," Inf. Syst., vol. 48, pp. 132150, Mar. 2015.
[CrossRef] [Web of Science Times Cited 121] [SCOPUS Times Cited 158]
 J. J. Yang, J. Q. Li, and Y. Niu, "A hybrid Solution for Privacy Preserving Medical Data Sharing in the Cloud Environment," Future Gener. Comput. Syst., vol. 4344, pp. 7486, Feb. 2015.
[CrossRef] [Web of Science Times Cited 157] [SCOPUS Times Cited 213]
 C. Guo, R. Zhuang, Y. Jie, Y. Ren, T. Wu, and K.-K. R. Choo, "Fine-grained Database Field Search Using Attribute-Based Encryption for E-Healthcare Clouds," J. Med. Syst., vol. 40, no. 11, Nov. 2016.
[CrossRef] [Web of Science Times Cited 63] [SCOPUS Times Cited 78]
 Y. Liu, Y. Zhang, J. Ling, and Z. Liu, "Secure and Fine-grained Access Control on e-healthcare Records in Mobile Cloud Computing," Future Gener. Comput. Syst., Jan. 2017.
[CrossRef] [Web of Science Times Cited 70] [SCOPUS Times Cited 82]
 E. A. Bossanyi, "Wind Turbine Control for Load Reduction," Wind Energy, vol. 6, no. 3, pp. 229244, Jul. 2003
[CrossRef] [Web of Science Times Cited 99] [SCOPUS Times Cited 385]
 R. E. Precup and S. Preitl, "Optimisation criteria in development of fuzzy controllers with dynamics," Eng. Appl. Artif. Intell., vol. 17, no. 6, pp. 661674, Sep. 2004.
[CrossRef] [Web of Science Times Cited 53] [SCOPUS Times Cited 71]
 M. A. Ramírez-Ortegón, V. Märgner, E. Cuevas, and R. Rojas, "An optimization for binarization methods by removing binary artifacts," Pattern Recognit. Lett., vol. 34, no. 11, pp. 12991306, Aug. 2013
[CrossRef] [Web of Science Times Cited 11] [SCOPUS Times Cited 23]
 S. B. Ghosn, F. Drouby, and H. M. Harmanani, "A Parallel Genetic Algorithm for the Open-Shop Scheduling Problem Using Deterministic and Random Moves," Int. J. Artif. Intell., vol. 14, no. 1, pp. 130144, 2016.
 D. Boneh and M. Franklin, "Identity-Based Encryption from the Weil Pairing," in Advances in Cryptology CRYPTO 2001, vol. 2139, Springer Berlin Heidelberg, 2001, pp. 213229.
[CrossRef] [SCOPUS Times Cited 5508]
Web of Science® Citations for all references: 7,924 TCR
SCOPUS® Citations for all references: 24,556 TCR
Web of Science® Average Citations per reference: 248 ACR
SCOPUS® Average Citations per reference: 767 ACR
TCR = Total Citations for References / ACR = Average Citations per Reference
We introduced in 2010 - for the first time in scientific publishing, the term "References Weight", as a quantitative indication of the quality ... Read more
Citations for references updated on 2022-10-03 03:38 in 174 seconds.
Note1: Web of Science® is a registered trademark of Clarivate Analytics.
Note2: SCOPUS® is a registered trademark of Elsevier B.V.
Disclaimer: All queries to the respective databases were made by using the DOI record of every reference (where available). Due to technical problems beyond our control, the information is not always accurate. Please use the CrossRef link to visit the respective publisher site.
Faculty of Electrical Engineering and Computer Science
Stefan cel Mare University of Suceava, Romania
All rights reserved: Advances in Electrical and Computer Engineering is a registered trademark of the Stefan cel Mare University of Suceava. No part of this publication may be reproduced, stored in a retrieval system, photocopied, recorded or archived, without the written permission from the Editor. When authors submit their papers for publication, they agree that the copyright for their article be transferred to the Faculty of Electrical Engineering and Computer Science, Stefan cel Mare University of Suceava, Romania, if and only if the articles are accepted for publication. The copyright covers the exclusive rights to reproduce and distribute the article, including reprints and translations.
Permission for other use: The copyright owner's consent does not extend to copying for general distribution, for promotion, for creating new works, or for resale. Specific written permission must be obtained from the Editor for such copying. Direct linking to files hosted on this website is strictly prohibited.
Disclaimer: Whilst every effort is made by the publishers and editorial board to see that no inaccurate or misleading data, opinions or statements appear in this journal, they wish to make it clear that all information and opinions formulated in the articles, as well as linguistic accuracy, are the sole responsibility of the author.