Blockchain-Based Multiple Authorities Attribute-Based Encryption for EHR Access Control Scheme

• Published in: Applied sciences Vol. 12; no. 21; p. 10812
• Main Authors: Yang, Xiaohui, Zhang, Chenshuo
• Format: Journal Article
• Language: English
• Published: Basel MDPI AG 01-11-2022
• Subjects: Access control; Blockchain; Cloud computing; Communication; Data encryption; Design; Distributed ledger; Electronic health records; Electronic medical records; Health care; Health services; Information sharing; IOMT; medical data sharing; multi-authority attribute encryption; outsourced decryption; Outsourcing; Patients; policy hiding; Prediction models; Privacy; Security; Servers; Stochasticity; Technology; Third party
• DOI: 10.3390/app122110812
• EISSN: 2076-3417

The Internet of Medical Things (IOMT) is critical in improving electronic device precision, dependability, and productivity. Researchers are driving the development of digital healthcare systems by connecting available medical resources and healthcare services. However, there are concerns about the security of sharing patients’ electronic health records. In response to the prevailing problems such as difficulties in sharing medical records between different hospitals and patients’ inability to grasp the usage of their medical records, we propose a patient-controlled and cloud-chain collaborative multi-authority attribute-based encryption for EHR sharing with verifiable outsourcing decryption and hiding access policies (VO-PH-MAABE). This scheme uses blockchain to store the validation parameters by utilizing its immutable, which data users use to verify the correctness of third-party outsourcing decryption results. In addition, we use policy-hiding technology to protect data privacy so that data security is guaranteed. Moreover, we use blockchain technology to establish trust among multiple authorities and utilize Shamir secret sharing and smart contracts to compute keys or tokens for attributes managed across multiple administrative domains, which avoids a single point of failure and reduces communication and computation overhead on the data user side. Finally, the ciphertext indistinguishability security under the chosen plaintext attack is demonstrated under the stochastic prediction model and compared with other schemes in terms of functionality, communication overhead, and computation overhead. The experimental results show the effectiveness of this scheme.