Highlights
Introduction
With the speedy growth of new-generation information techniques like the cloud computing, Internet of Things and the concept of smart city, it encourages healthcare providers to adopt and use Personnel Health Records systems (PHR) meaningfully to improve healthcare quality. In particular, during the medical care service a large number of patients’ data is created and need to be safely stored for a long period. However, PHR system is based on storing a highly sensitive data and managing it on a third-party platform. Cloud computing has been viewed as an appropriate platform to deploy PHR systems for its inexpensive distributed computing capabilities through the internet, which has numerous features such as portability, reliability, scalability and elasticity. Hence, using the cloud servers to store and manage the PHR data is becoming inevitable which improves the quality of PHR management and making the process easier for its users. PHR system consists of many entities the EHR owners and users such as patients, doctors, nurses, researchers and other health care institution. In PHR system, PHR owners generally upload and view their personal information and medical records from cloud servers. PHR owners can manage the access policy and give access to the PHR users where only authorized users are able to access the data.
Although there are many advantages when using cloud servers to manage the PHR data, it also brings some concerns, such as the security of the sensitive data [1] and the privacy of the PHR owners and users. If a malicious or unauthorized adversary breaks the PHR system and conducts a series of malicious actions, for example the leakage of the PHR owner identity and malicious tampering with medical records, it will not only result in disclosure of patient personal privacy, but also lead to misdiagnosis by the doctors and brings serious consequences. Hence, to solve this security and privacy concerns, it is necessary to put an access control structure that legitimates users who can access the PHR data. However, access control in clouds is gaining attention because it is important that only authorized users have access to valid service or sensitive data. Attribute-Based Encryption (ABE) can be used to provide the fined-grained access control of the PHR data.
The PHR are encrypted under some access policy that are defined by the PHR owner. After encrypting the PHR data the owner uploads the encrypted PHR data to the cloud servers. Users are given sets of attributes and corresponding keys. Only when the users have matching set of attributes, they can decrypt the PHRs stored in the cloud. Access control in health care has been studied in [2].
Although ABE schemes [3] could provide a secure access control for PHR data in a PHR system, they still suffer from a serious problem that the access policy may leak PHR owner’s privacy. It is just not enough to store the PHR data securely in the cloud, but it is also necessary to ensure user anonymity. In ABE scheme, the access policy will be sent together with the ciphertext to PHR users in decryption phase, which may lead to the leakage of owner’s privacy or any related sensitive information from the access policy. For instance, an adversary can obtain some sensitive information in the access policy such as the name of the doctor or the department that has the access to the owner’s sensitive data, which leads to suspect that the PHR owner is suffering from a disease that is cured by that specific department or doctor. To solve this problem of privacy leakage, there have been many proposed ABE schemes [4] to achieve a privacy-preserving for the PHR system.
However, all ABE schemes only support data encryption functionality and do not provide authentication capability. Attribute-based signcryption (ABSC) is proposed by Maji et al [5], in ABSC users have a claim predicate associated with a message. The claim predicate helps to identify the user as an authorized one, without revealing its identity. ABSC mechanism emerges in integrating the fine-grained access control of data in attribute-based cryptography terminology and the efficient advantage of signcryption technology, which provides confidentiality, unforgeability and public verifiability simultaneously. Therefore, it is more efficient to design a privacy-preserving scheme for PHR system using the ABSC technology.
The rest of the thesis is organized as follows, chapter 2 reviews the related works, chapter 3 presents the background of the cryptographic and data splitting preliminaries and schemes, chapter 4 presents the proposed PHR system scheme based on CP-ABE scheme and ECC. Chapter 5 presents implementations and experimentations, finally chapter 6 presents the future work, and we summarize our thesis in the conclusion.
Contribution
The purpose of this research is to provide an efficient access control with an effective revocation system for PHR systems. The research is mainly divided in two parts, first is access control using the elliptic curves and CP-ABE scheme, and the second part is based on creating an efficient revocation system for the PHR systems with low computation. The outline of the contributions is as follows:
•CP-ABE access control based on the elliptic curve cryptography;
•Efficient revocation mechanism for the PHR system;
•Delegate the complicated computation tasks to the cloud servers without any disclosure of the sensitive data or user access privilege information;
•Security and privacy for the PHR data owners;
•Efficient PHR data sharing between the owners and users;
•Anonymity where the unauthorized users are unable to get access to the medical data and patient identity;
•Confidentiality where the adversary cannot know the real content of the PHR without having the sufficient key;
•Improve the efficiency of the proposed scheme for PHR systems, which no longer needs any complicated bilinear parings. The scheme should be friendly for entities with limited computing power.
This Nursing Assignment has been solved by our Nursing Experts at My Uni Paper. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+ Students in Australia, UK & US by helping them to score HD in their academics. Our experts are well trained to follow all marking rubrics & referencing style.
Be it a used or new solution, the quality of the work submitted by our assignment experts remains unhampered. You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed that you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive, plagiarism (with free Turnitin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.
© Copyright 2026 My Uni Papers – Student Hustle Made Hassle Free. All rights reserved.