A Secure Personal Health Record Sharing System with Key Aggregate Dynamic Searchable Encryption

Recently, as interest in individualized health has increased, the Personal Health Record (PHR) has attracted a lot of attention for prognosis predictions and accurate diagnoses. Cloud servers have been used to manage the PHR system, but privacy concerns are evident since cloud servers process the en...

Full description

Bibliographic Details
Main Authors: Jihyeon Oh, JoonYoung Lee, MyeongHyun Kim, Youngho Park, KiSung Park, SungKee Noh
Format: Article
Language:English
Published: MDPI AG 2022-10-01
Series:Electronics
Subjects:
Online Access:https://www.mdpi.com/2079-9292/11/19/3199
_version_ 1797479707391819776
author Jihyeon Oh
JoonYoung Lee
MyeongHyun Kim
Youngho Park
KiSung Park
SungKee Noh
author_facet Jihyeon Oh
JoonYoung Lee
MyeongHyun Kim
Youngho Park
KiSung Park
SungKee Noh
author_sort Jihyeon Oh
collection DOAJ
description Recently, as interest in individualized health has increased, the Personal Health Record (PHR) has attracted a lot of attention for prognosis predictions and accurate diagnoses. Cloud servers have been used to manage the PHR system, but privacy concerns are evident since cloud servers process the entire PHR, which contains the sensitive information of patients. In addition, cloud servers centrally manage the PHR system so patients lose direct control over their own PHR and cloud servers can be an attractive target for malicious users. Therefore, ensuring the integrity and privacy of the PHR and allocating authorization to users are important issues. In this paper, we propose a secure PHR sharing system using a blockchain, InterPlanetary File System (IPFS), and smart contract to ensure PHR integrity and secure verification. To guarantee the patient’s authority over the management of his/her own PHR, as well as provide convenient access, we suggest a key aggregate dynamic searchable encryption. We prove the security of the proposed scheme through informal and formal analyses including an Automated Verification of Internet Security Protocols and Applications (AVISPA) simulation, Burrows–Abadi–Needham (BAN) logic, and security-model-based games. Furthermore, we estimate the computational costs of the proposed scheme using a Multiprecision Integer and Rational Arithmetic Cryptographic Library (MIRACL) and compare the results with those of previous works.
first_indexed 2024-03-09T21:50:41Z
format Article
id doaj.art-36ad8e74d2d44fadb5bc1e1102195283
institution Directory Open Access Journal
issn 2079-9292
language English
last_indexed 2024-03-09T21:50:41Z
publishDate 2022-10-01
publisher MDPI AG
record_format Article
series Electronics
spelling doaj.art-36ad8e74d2d44fadb5bc1e11021952832023-11-23T20:08:00ZengMDPI AGElectronics2079-92922022-10-011119319910.3390/electronics11193199A Secure Personal Health Record Sharing System with Key Aggregate Dynamic Searchable EncryptionJihyeon Oh0JoonYoung Lee1MyeongHyun Kim2Youngho Park3KiSung Park4SungKee Noh5School of Electronic and Electrical Engineering, Kyungpook National University, Daegu 41566, KoreaSchool of Electronic and Electrical Engineering, Kyungpook National University, Daegu 41566, KoreaSchool of Electronic and Electrical Engineering, Kyungpook National University, Daegu 41566, KoreaSchool of Electronic and Electrical Engineering, Kyungpook National University, Daegu 41566, KoreaBlockchain Research Section, Electronics and Telecommunications Research Institute, Daejeon 34129, KoreaBlockchain Research Section, Electronics and Telecommunications Research Institute, Daejeon 34129, KoreaRecently, as interest in individualized health has increased, the Personal Health Record (PHR) has attracted a lot of attention for prognosis predictions and accurate diagnoses. Cloud servers have been used to manage the PHR system, but privacy concerns are evident since cloud servers process the entire PHR, which contains the sensitive information of patients. In addition, cloud servers centrally manage the PHR system so patients lose direct control over their own PHR and cloud servers can be an attractive target for malicious users. Therefore, ensuring the integrity and privacy of the PHR and allocating authorization to users are important issues. In this paper, we propose a secure PHR sharing system using a blockchain, InterPlanetary File System (IPFS), and smart contract to ensure PHR integrity and secure verification. To guarantee the patient’s authority over the management of his/her own PHR, as well as provide convenient access, we suggest a key aggregate dynamic searchable encryption. We prove the security of the proposed scheme through informal and formal analyses including an Automated Verification of Internet Security Protocols and Applications (AVISPA) simulation, Burrows–Abadi–Needham (BAN) logic, and security-model-based games. Furthermore, we estimate the computational costs of the proposed scheme using a Multiprecision Integer and Rational Arithmetic Cryptographic Library (MIRACL) and compare the results with those of previous works.https://www.mdpi.com/2079-9292/11/19/3199personal health recordkey aggregate dynamic searchable encryptionblockchaininterplanetary file system
spellingShingle Jihyeon Oh
JoonYoung Lee
MyeongHyun Kim
Youngho Park
KiSung Park
SungKee Noh
A Secure Personal Health Record Sharing System with Key Aggregate Dynamic Searchable Encryption
Electronics
personal health record
key aggregate dynamic searchable encryption
blockchain
interplanetary file system
title A Secure Personal Health Record Sharing System with Key Aggregate Dynamic Searchable Encryption
title_full A Secure Personal Health Record Sharing System with Key Aggregate Dynamic Searchable Encryption
title_fullStr A Secure Personal Health Record Sharing System with Key Aggregate Dynamic Searchable Encryption
title_full_unstemmed A Secure Personal Health Record Sharing System with Key Aggregate Dynamic Searchable Encryption
title_short A Secure Personal Health Record Sharing System with Key Aggregate Dynamic Searchable Encryption
title_sort secure personal health record sharing system with key aggregate dynamic searchable encryption
topic personal health record
key aggregate dynamic searchable encryption
blockchain
interplanetary file system
url https://www.mdpi.com/2079-9292/11/19/3199
work_keys_str_mv AT jihyeonoh asecurepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption
AT joonyounglee asecurepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption
AT myeonghyunkim asecurepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption
AT younghopark asecurepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption
AT kisungpark asecurepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption
AT sungkeenoh asecurepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption
AT jihyeonoh securepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption
AT joonyounglee securepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption
AT myeonghyunkim securepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption
AT younghopark securepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption
AT kisungpark securepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption
AT sungkeenoh securepersonalhealthrecordsharingsystemwithkeyaggregatedynamicsearchableencryption