• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

计算机工程与科学 ›› 2022, Vol. 44 ›› Issue (09): 1610-1619.

• 计算机网络与信息安全 • 上一篇    下一篇

加密电子病历数据共享方案

牛淑芬1,于斐1,陈俐霞1,王彩芬2   

  1. (1.西北师范大学计算机科学与工程学院,甘肃 兰州 730070;2.深圳技术大学大数据与互联网学院,广东 深圳 518118) 
  • 收稿日期:2021-03-23 修回日期:2021-08-17 接受日期:2022-09-25 出版日期:2022-09-25 发布日期:2022-09-25
  • 基金资助:
    国家自然科学基金(61772022)

A data sharing scheme for encrypted electronic health record

NIU Shu-fen1,YU Fei1,CHEN Li-xia1,WANG Cai-fen2   

  1. (1.College of Computer Science and Engineering,Northwest Normal University,Lanzhou 730070;
    2.College of Big Data and Internet,Shenzhen Technology University,Shenzhen 518118,China)
  • Received:2021-03-23 Revised:2021-08-17 Accepted:2022-09-25 Online:2022-09-25 Published:2022-09-25

摘要: 为了实现电子病历数据的细粒度访问控制以及安全存储与共享,提出了一种基于属性的云链协同存储的电子病历共享方案。该方案用对称加密算法加密电子病历,用基于密文策略的属性基加密算法加密对称密钥,用可搜索加密算法加密关键字。电子病历密文存储在医疗云上,安全索引存储在联盟链上。该方案使用可搜索加密技术实现关键字的安全搜索,使用代理重加密技术实现用户属性的撤销。经安全性证明,该方案能够实现密文的安全性和关键字的安全性。数值模拟实验结果表明,该方案是有效的。

关键词: 电子病历, 联盟链, 可搜索加密, 代理重加密;基于属性加密;属性撤销

Abstract:  In order to realize fine-grained access control, secure storage and sharing of electronic health record data, this paper proposes a cloud-chain collaborative storage electronic health record sharing scheme based on attribute encryption. In the scheme, the symmetric encryption algorithm is used to encrypt the electronic health record, the ciphertext-policy attribute-based encryption is used to encrypt the symmetric key, and the searchable encryption algorithm is used to encrypt the key words. Electronic health record ciphertext is stored on the medical cloud, and secure index is stored on the consortium chain. The secure search of keywords is realized by the searchable encryption technology and the user attribute is relocated by proxy re-encryption technology. It is proved that the scheme can achieve the security of ciphertext and keyword. The numerical simulation results show that the scheme is effective.

Key words: electronic health record, consortium blockchain, searchable encryption, proxy re-encryption, attribute-based encryption, attribute revocation