基于改进CP-ABE模型的医疗数据隐私保护管理设计与应用

Design and application of clinical data privacy protection management based on improved CP-ABE model

摘要:

物联网设备监测患者的健康状况,并将收集到的数据作为电子病历(EMR)上传到云端进行存储和共享。将电子病历外包给云会带来新的安全和隐私隐患。提出了一种新的架构模型,以确保外包健康记录的安全性和私密性。该模型利用偏序集合(POSET)构造基于组的访问结构,利用基于密文策略的属性加密(CP-ABE)提供细粒度的EMR访问控制。改进后的基于CP-ABE (G-CP-ABE)的组通过减少访问树中的叶节点数量,将运算量降至最低。将对称加密和CP-ABE方案合并在一起,以最大程度地减少总体加密时间。因此,即使是资源受限的物联网设备,G-CP-ABE仍可用于监视健康状况。性能分析表明了该模型的有效性,适合于实际应用。

Abstract:

Internet of things devices monitor the health status of patients, and upload the collected data as EMR to the cloud for storage and sharing. Outsourcing electronic medical records to the cloud will bring new security and privacy risks. A new architecture model is proposed to ensure the security and privacy of outsourcing health records. In this model, POSET is used to construct group based access structure, and CP-ABE is used to provide fine-grained EMR access control. The improved group based on g-CP-ABE reduces the number of leaf nodes in the access tree to minimize the computation. The symmetric encryption and CP-ABE scheme are combined to minimize the overall encryption time. Therefore, g-CP-ABE can still be used to monitor the health status of Internet of things devices with limited resources. Performance analysis shows that the model is effective and suitable for practical application.