面向个人健康记录并支持属性撤销的访问控制

发布时间：2018-03-30 20:04

本文选题：个人健康记录　切入点：云计算　出处：《小型微型计算机系统》2017年04期

【摘要】：个人健康记录服务是一项新兴的医疗信息交换服务,在该服务中,病人的记录和信息都是由自己存放在网络上的,现实中都是外包给第三方的云服务器,而云服务商是不完全可信的,因此在云环境中提供高效而又安全的访问控制是当前亟待解决的问题之一.采用基于属性的加密方法加密病人的记录并上传至云服务器是安全可行的.为此设计出一种在个人健康记录服务中使用并支持属性撤销的加密方案,采用密文密钥定长的方式实现节约存储空间的目的,引入版本号标记和代理重加密技术实现属性的撤销.最后,从安全性以及效率方面得出方案的安全性与高效性,证明其适用于个人健康记录服务模型.
[Abstract]:Personal health record service is an emerging medical information exchange service, in which patients' records and information are stored on the Internet, and in reality are outsourced to third party cloud servers.Cloud service providers are not completely trusted, so providing efficient and secure access control in cloud environment is one of the urgent problems to be solved.It is safe and feasible to encrypt patient's records and upload them to cloud server by means of attribute-based encryption.In this paper, an encryption scheme which uses and supports attribute revocation in personal health record service is designed. The purpose of saving storage space is realized by using ciphertext key fixed length.The version number tag and proxy reencryption technology are introduced to realize the revocation of attributes.Finally, the security and efficiency of the scheme are obtained from the aspects of security and efficiency, and it is proved that it is suitable for the model of personal health record service.
【作者单位】：南京工业大学计算机科学与技术学院;南京邮电大学通信与信息工程学院;江苏省无线传感网高技术研究重点实验室;
【基金】：国家自然科学基金项目(61572263,61272084)资助江苏省高校自然科学研究重大项目(11KJA520002)资助高等学校博士学科点专项科研基金课题项目(20113223110003)资助
【分类号】：TP393.08

【参考文献】