On the Security of-'Verifiable Privacy-Preserving Monitoring for Cloud-Assisted mHealth Systems'

摘要

Protecting user data in public server is one of the major concerns in cloud computing scenarios. In recent trends, data owner prefers storing data in a third party server in a controlled manner, sometimes in an encrypted form. In this paper, we discuss a recent scheme appeared in INFOCOM 2015 that claims verifiable privacy-preserving service in healthcare systems. We show that the scheme suffers from security weaknesses, in particular, it does not provide privacy-preserving services, which is the main claim of the scheme. We provide an improved solution by slightly modifying the scheme, which retains the security and privacy claim intact without increasing any overhead.