A Secure Personal Health Record Sharing System with Key Aggregate Dynamic Searchable Encryption
Recently, as interest in individualized health has increased, the Personal Health Record (PHR) has attracted a lot of attention for prognosis predictions and accurate diagnoses. Cloud servers have been used to manage the PHR system, but privacy concerns are evident since cloud servers process the en...
Main Authors: | , , , , , |
---|---|
Format: | Article |
Language: | English |
Published: |
MDPI AG
2022-10-01
|
Series: | Electronics |
Subjects: | |
Online Access: | https://www.mdpi.com/2079-9292/11/19/3199 |
_version_ | 1797479707391819776 |
---|---|
author | Jihyeon Oh JoonYoung Lee MyeongHyun Kim Youngho Park KiSung Park SungKee Noh |
author_facet | Jihyeon Oh JoonYoung Lee MyeongHyun Kim Youngho Park KiSung Park SungKee Noh |
author_sort | Jihyeon Oh |
collection | DOAJ |
description | Recently, as interest in individualized health has increased, the Personal Health Record (PHR) has attracted a lot of attention for prognosis predictions and accurate diagnoses. Cloud servers have been used to manage the PHR system, but privacy concerns are evident since cloud servers process the entire PHR, which contains the sensitive information of patients. In addition, cloud servers centrally manage the PHR system so patients lose direct control over their own PHR and cloud servers can be an attractive target for malicious users. Therefore, ensuring the integrity and privacy of the PHR and allocating authorization to users are important issues. In this paper, we propose a secure PHR sharing system using a blockchain, InterPlanetary File System (IPFS), and smart contract to ensure PHR integrity and secure verification. To guarantee the patient’s authority over the management of his/her own PHR, as well as provide convenient access, we suggest a key aggregate dynamic searchable encryption. We prove the security of the proposed scheme through informal and formal analyses including an Automated Verification of Internet Security Protocols and Applications (AVISPA) simulation, Burrows–Abadi–Needham (BAN) logic, and security-model-based games. Furthermore, we estimate the computational costs of the proposed scheme using a Multiprecision Integer and Rational Arithmetic Cryptographic Library (MIRACL) and compare the results with those of previous works. |
first_indexed | 2024-03-09T21:50:41Z |
format | Article |
id | doaj.art-36ad8e74d2d44fadb5bc1e1102195283 |
institution | Directory Open Access Journal |
issn | 2079-9292 |
language | English |
last_indexed | 2024-03-09T21:50:41Z |
publishDate | 2022-10-01 |
publisher | MDPI AG |
record_format | Article |
series | Electronics |
spelling | doaj.art-36ad8e74d2d44fadb5bc1e11021952832023-11-23T20:08:00ZengMDPI AGElectronics2079-92922022-10-011119319910.3390/electronics11193199A Secure Personal Health Record Sharing System with Key Aggregate Dynamic Searchable EncryptionJihyeon Oh0JoonYoung Lee1MyeongHyun Kim2Youngho Park3KiSung Park4SungKee Noh5School of Electronic and Electrical Engineering, Kyungpook National University, Daegu 41566, KoreaSchool of Electronic and Electrical Engineering, Kyungpook National University, Daegu 41566, KoreaSchool of Electronic and Electrical Engineering, Kyungpook National University, Daegu 41566, KoreaSchool of Electronic and Electrical Engineering, Kyungpook National University, Daegu 41566, KoreaBlockchain Research Section, Electronics and Telecommunications Research Institute, Daejeon 34129, KoreaBlockchain Research Section, Electronics and Telecommunications Research Institute, Daejeon 34129, KoreaRecently, as interest in individualized health has increased, the Personal Health Record (PHR) has attracted a lot of attention for prognosis predictions and accurate diagnoses. Cloud servers have been used to manage the PHR system, but privacy concerns are evident since cloud servers process the entire PHR, which contains the sensitive information of patients. In addition, cloud servers centrally manage the PHR system so patients lose direct control over their own PHR and cloud servers can be an attractive target for malicious users. Therefore, ensuring the integrity and privacy of the PHR and allocating authorization to users are important issues. In this paper, we propose a secure PHR sharing system using a blockchain, InterPlanetary File System (IPFS), and smart contract to ensure PHR integrity and secure verification. To guarantee the patient’s authority over the management of his/her own PHR, as well as provide convenient access, we suggest a key aggregate dynamic searchable encryption. We prove the security of the proposed scheme through informal and formal analyses including an Automated Verification of Internet Security Protocols and Applications (AVISPA) simulation, Burrows–Abadi–Needham (BAN) logic, and security-model-based games. Furthermore, we estimate the computational costs of the proposed scheme using a Multiprecision Integer and Rational Arithmetic Cryptographic Library (MIRACL) and compare the results with those of previous works.https://www.mdpi.com/2079-9292/11/19/3199personal health recordkey aggregate dynamic searchable encryptionblockchaininterplanetary file system |
spellingShingle | Jihyeon Oh JoonYoung Lee MyeongHyun Kim Youngho Park KiSung Park SungKee Noh A Secure Personal Health Record Sharing System with Key Aggregate Dynamic Searchable Encryption Electronics personal health record key aggregate dynamic searchable encryption blockchain interplanetary file system |
title | A Secure Personal Health Record Sharing System with Key Aggregate Dynamic Searchable Encryption |
title_full | A Secure Personal Health Record Sharing System with Key Aggregate Dynamic Searchable Encryption |
title_fullStr | A Secure Personal Health Record Sharing System with Key Aggregate Dynamic Searchable Encryption |
title_full_unstemmed | A Secure Personal Health Record Sharing System with Key Aggregate Dynamic Searchable Encryption |
title_short | A Secure Personal Health Record Sharing System with Key Aggregate Dynamic Searchable Encryption |
title_sort | secure personal health record sharing system with key aggregate dynamic searchable encryption |
topic | personal health record key aggregate dynamic searchable encryption blockchain interplanetary file system |
url | https://www.mdpi.com/2079-9292/11/19/3199 |
work_keys_str_mv | AT jihyeonoh asecurepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption AT joonyounglee asecurepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption AT myeonghyunkim asecurepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption AT younghopark asecurepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption AT kisungpark asecurepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption AT sungkeenoh asecurepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption AT jihyeonoh securepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption AT joonyounglee securepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption AT myeonghyunkim securepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption AT younghopark securepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption AT kisungpark securepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption AT sungkeenoh securepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption |