Hybrid and Secure E-Health Data
Sharing Architecture in Multi-Clouds
Environment
Tayssir Ismail
1,2(B) , Haifa Touati
1,2 , Nasreddine Hajlaoui
1,2 ,
and Hassen Hamdi
3
1 Hatem Bettahar Research Unit IResCoMath, Gabes, Tunisia
taissirism88@gmail.com, haifa.touai@cristal.rnu.tn,
hajlaoui.ing@gmail.com
2 Faculty of Science of Gabes, Gabes, Tunisia
3 MIRACL Laboratory, FSEG-Sfax, Sfax, Tunisia
hhassen2006@yahoo.fr
Abstract. Healthcare is among the sectors showing efforts in adopting
cloud computing to its services considering the provided cost reduction
and healthcare process efficiency. However, outsourcing patient’s sensitive data increases the concerns regarding security, privacy, and integrity
of healthcare data. Therefore, there is a need for building a trust relationship between patients and e-health systems. In this paper, we propose
a privacy-preserving framework, called Hybrid and Secure Data Sharing
Architecture (HSDSA), to secure data storage in e-health systems. Our
approach improves security in healthcare by maintaining the privacy and
confidentiality of sensitive data and preventing threats. In fact, in the
upload phase, Multi-cloud environment is used to store Rivest–Shamir–
Adleman (RSA) encrypted medical records. We adopt a Shamir’s secret
sharing approach for the distribution of shares to different independent
cloud providers. In the retrieval phase, the reconstruction operation is
based on the (t, n) strategy. To check the requester identity and to prove
the hash possession, we used a zero-knowledge cryptography algorithm,
namely the Schnorr algorithm. The patient has a total control over the
generation and management of the decryption keys using Diffie-Hellman
algorithm without relying on a trusted authority.
Keywords: E-health system security · Privacy preservation ·
Multi-cloud · Data storage · Data share · Data encryption
1 Introduction
Cloud computing is a new promising technology that leverages the user from
the burden of hardware maintenance and offers dynamically flexible and scalable
computational resources accessible from any place where a network is available.
The emergence of this paradigm has deeply influenced many domains and especially the healthcare sector. However, the usage of this model in the healthcare
c
The Author(s) 2020
M. Jmaiel et al. (Eds.): ICOST 2020, LNCS 12157, pp. 249–258, 2020.
https://doi.org/10.1007/978-3-030-51517-1_21
Sharing Architecture in Multi-Clouds
Environment
Tayssir Ismail
1,2(B) , Haifa Touati
1,2 , Nasreddine Hajlaoui
1,2 ,
and Hassen Hamdi
3
1 Hatem Bettahar Research Unit IResCoMath, Gabes, Tunisia
taissirism88@gmail.com, haifa.touai@cristal.rnu.tn,
hajlaoui.ing@gmail.com
2 Faculty of Science of Gabes, Gabes, Tunisia
3 MIRACL Laboratory, FSEG-Sfax, Sfax, Tunisia
hhassen2006@yahoo.fr
Abstract. Healthcare is among the sectors showing efforts in adopting
cloud computing to its services considering the provided cost reduction
and healthcare process efficiency. However, outsourcing patient’s sensitive data increases the concerns regarding security, privacy, and integrity
of healthcare data. Therefore, there is a need for building a trust relationship between patients and e-health systems. In this paper, we propose
a privacy-preserving framework, called Hybrid and Secure Data Sharing
Architecture (HSDSA), to secure data storage in e-health systems. Our
approach improves security in healthcare by maintaining the privacy and
confidentiality of sensitive data and preventing threats. In fact, in the
upload phase, Multi-cloud environment is used to store Rivest–Shamir–
Adleman (RSA) encrypted medical records. We adopt a Shamir’s secret
sharing approach for the distribution of shares to different independent
cloud providers. In the retrieval phase, the reconstruction operation is
based on the (t, n) strategy. To check the requester identity and to prove
the hash possession, we used a zero-knowledge cryptography algorithm,
namely the Schnorr algorithm. The patient has a total control over the
generation and management of the decryption keys using Diffie-Hellman
algorithm without relying on a trusted authority.
Keywords: E-health system security · Privacy preservation ·
Multi-cloud · Data storage · Data share · Data encryption
1 Introduction
Cloud computing is a new promising technology that leverages the user from
the burden of hardware maintenance and offers dynamically flexible and scalable
computational resources accessible from any place where a network is available.
The emergence of this paradigm has deeply influenced many domains and especially the healthcare sector. However, the usage of this model in the healthcare
c
The Author(s) 2020
M. Jmaiel et al. (Eds.): ICOST 2020, LNCS 12157, pp. 249–258, 2020.
https://doi.org/10.1007/978-3-030-51517-1_21