Hybrid and Secure E-Health Data Sharing Architecture
257
The DR decrypts P U
using K s to extract the DO private key. Possessing PU,
the DR decrypts R
to finally recover the original EHR (R).
P U = D Ks (P U
)
(5)
R = D P U (R
)
(6)
5 Conclusion
In this paper, we presented HSDSA, a novel architecture for secure EHR. HSDSA
includes several techniques, namely (i) RSA algorithm to guarantee the security
of outsourced data, (ii) Shamir’s secret sharing to securely distribute data across
multiple clouds, (iii) a secure outsourcing reconstruction based on the (t, n)
strategy, (iv) a Schnorr-based technique to prove data possession and to verify
the requester identity and (v) a Diffie-Hellman algorithm to securely exchange
decryption key. The proposed scheme allows the patient to get total control over
the generation and management of the decryption keys without relying on a
trusted authority. In a future work, we plan to add governmental organisation
as Data Requester. These latter need to access data without the Data Owner
authorisation. Hence, we aim to protect privacy while giving them access to
EHR.
References
1. AlZain, M.A., et al.: Cloud computing security: from single to multi-clouds. In: 45th
International Conference on System Sciences (2012)
2. Fabian, B., Ermakova, T., Junghanns, P.: Collaborative and secure sharing of healthcare data in multi-clouds. Inform. Syst. 48, 132–150 (2015)
3. Xhafa, F., Li, J., Zhao, G., Li, J., Chen, X., Wong, D.S.: Designing cloud-based
electronic health record system with attribute-based encryption. Multimed. Tools
Appl. 74(10), 3441–3458 (2015)
4. Premarathne, U.S.: Hybrid cryptographic access control for cloud based electronic
health records systems. IEEE Cloud Comput. 2, 1–7 (2017)
5. Zhang, H., Yu, J., Tian, C., Zhao, P., Xu, G., Lin, J.: Cloud storage for electronic
health records based on secret sharing with verifiable reconstruction outsourcing.
IEEE Access 6, 40713–40722 (2018)
6. Gupta, P., Verma, D.K., Singh, A. K.: Improving RSA algorithm using multithreading model for outsourced data security in cloud storage. In: 8th International
Conference on Cloud Computing, Data Science & Engineering, pp. 14–15 (2018)
7. Smart, N.P.: Zero-knowledge proofs. In: Smart, N.P. (ed.) Cryptography Made Simple. Information Security and Cryptography, pp. 425–438. Springer, Cham (2016).
https://doi.org/10.1007/978-3-319-21936-3 21
8. Blake-Wilson, S., Menezes, A.: Authenticated Diffe-Hellman key agreement protocols. In: Tavares, S., Meijer, H. (eds.) SAC 1998. LNCS, vol. 1556, pp. 339–361.
Springer, Berlin (1998). https://doi.org/10.1007/3-540-48892-8 26
257
The DR decrypts P U
using K s to extract the DO private key. Possessing PU,
the DR decrypts R
to finally recover the original EHR (R).
P U = D Ks (P U
)
(5)
R = D P U (R
)
(6)
5 Conclusion
In this paper, we presented HSDSA, a novel architecture for secure EHR. HSDSA
includes several techniques, namely (i) RSA algorithm to guarantee the security
of outsourced data, (ii) Shamir’s secret sharing to securely distribute data across
multiple clouds, (iii) a secure outsourcing reconstruction based on the (t, n)
strategy, (iv) a Schnorr-based technique to prove data possession and to verify
the requester identity and (v) a Diffie-Hellman algorithm to securely exchange
decryption key. The proposed scheme allows the patient to get total control over
the generation and management of the decryption keys without relying on a
trusted authority. In a future work, we plan to add governmental organisation
as Data Requester. These latter need to access data without the Data Owner
authorisation. Hence, we aim to protect privacy while giving them access to
EHR.
References
1. AlZain, M.A., et al.: Cloud computing security: from single to multi-clouds. In: 45th
International Conference on System Sciences (2012)
2. Fabian, B., Ermakova, T., Junghanns, P.: Collaborative and secure sharing of healthcare data in multi-clouds. Inform. Syst. 48, 132–150 (2015)
3. Xhafa, F., Li, J., Zhao, G., Li, J., Chen, X., Wong, D.S.: Designing cloud-based
electronic health record system with attribute-based encryption. Multimed. Tools
Appl. 74(10), 3441–3458 (2015)
4. Premarathne, U.S.: Hybrid cryptographic access control for cloud based electronic
health records systems. IEEE Cloud Comput. 2, 1–7 (2017)
5. Zhang, H., Yu, J., Tian, C., Zhao, P., Xu, G., Lin, J.: Cloud storage for electronic
health records based on secret sharing with verifiable reconstruction outsourcing.
IEEE Access 6, 40713–40722 (2018)
6. Gupta, P., Verma, D.K., Singh, A. K.: Improving RSA algorithm using multithreading model for outsourced data security in cloud storage. In: 8th International
Conference on Cloud Computing, Data Science & Engineering, pp. 14–15 (2018)
7. Smart, N.P.: Zero-knowledge proofs. In: Smart, N.P. (ed.) Cryptography Made Simple. Information Security and Cryptography, pp. 425–438. Springer, Cham (2016).
https://doi.org/10.1007/978-3-319-21936-3 21
8. Blake-Wilson, S., Menezes, A.: Authenticated Diffe-Hellman key agreement protocols. In: Tavares, S., Meijer, H. (eds.) SAC 1998. LNCS, vol. 1556, pp. 339–361.
Springer, Berlin (1998). https://doi.org/10.1007/3-540-48892-8 26