A Secure Role-Based Cloud Storage System For Encrypted Patient-Centric Health Records

Zhou, Lan and Varadharajan, Vijay and Gopinath, K (2016) A Secure Role-Based Cloud Storage System For Encrypted Patient-Centric Health Records. In: COMPUvijay.varadharajan@mq.edu.auTER JOURNAL, 59 (11). pp. 1593-1611.

PDF Com_Jou_59-11_1593_2016.pdf - Published Version Restricted to Registered users only Download (1MB) | Request a copy

Abstract

With the rapid developments occurring in cloud services, there has been a growing trend to use cloud for large-scale data storage. Due to the increasing popularity of cloud storage, many healthcare organizations have started moving electronic health records (EHRs) to cloud-based storage systems. However, this has raised the important security issue of how to protect and prevent unauthorized access to EHR data stored in a public cloud. Several cryptographic access control schemes have been proposed to protect the security of data stored in the cloud by integrating cryptographic techniques with access control models. In this paper, we consider a novel role-based encryption technique to build a secure and flexible large-scale EHR system where role-based access control policies are enforced in a cloud environment. Then we discuss a practical EHR system called the personally controlled electronic health record (PCEHR) system recently developed by the Australian Government, and show how the security weaknesses in the PCEHR system can be addressed by our proposed scheme. The proposed system has the potential to be useful in commercial healthcare systems as it captures practical access policies based on roles in a flexible manner and provides secure data storage in the cloud enforcing these access policies.

Item Type:	Journal Article
Publication:	COMPUvijay.varadharajan@mq.edu.auTER JOURNAL
Publisher:	OXFORD UNIV PRESS, GREAT CLARENDON ST, OXFORD OX2 6DP, ENGLAND
Additional Information:	Copy right for this article belongs to the OXFORD UNIV PRESS, GREAT CLARENDON ST, OXFORD OX2 6DP, ENGLAND
Department/Centre:	Division of Electrical Sciences > Computer Science & Automation
Date Deposited:	20 May 2017 05:13
Last Modified:	20 May 2017 05:13
URI:	http://eprints.iisc.ac.in/id/eprint/56887

Actions (login required)

View Item