A Novel Revocable Personal Health Record Scheme Using outsourced CP-ABE

摘要

With the rapid development of the cloud computing, personal health record (PHR) has become a hot topic recently. However, the most important issue is how to implement secure and efficient data sharing scheme since PHR is often outsourced to be stored at a third party. Therefore, the research on a secure and efficient Personal Health Record scheme to protect patients' privacy in PHR files is of great significance. In this paper, we present a revocable outsourced CP-ABE based personal health record scheme. In the scheme, we divide the users into personal domain (PSD) and public domain (PUD) logically. In the PSD, we adopt the Improved Key-Aggregate Encryption (IKAE) to achieve read access permission. For the PHR users of PUD, we use revocable outsource-able MA-ABE to largely eliminate the overhead for both the PHR owner and users, which can also support efficient attribute revocation without updating the PHR user's private key. At the same time, the import of multi-authority reduces the complexity of the key management and avoids the single point of failure. Function and performance testing results show the security and efficiency of the proposed scheme.