A fine-grained EHR data sharing system for IoMT: Efficient revocation outsourcing based on RPCH
摘要
Electronic Health Records (EHRs) have attracted significant attention as digital carriers of medical data with the rise of the Internet of Medical Things (IoMT). Most existing solutions have applied blockchain technology to EHRs to resolve concerns including single points of failure, data security. However, the inherent immutability of blockchain conflicts with user privacy concerns and the need to update medical data. To ensure updates of EHRs and protect user privacy, we propose an RPCH-based data sharing scheme that supports outsourced revocation and ciphertext verifiability. Through a revocation-enabled attribute-based encryption method with built-in integrity validation, we specifically construct ciphertext-verifiable RPCH. We leverage a commitment-based verification mechanism to ensure the data integrity of revoked ciphertexts. Moreover, we enable controllable transaction-level redaction operations through the flexible configuration of access structures. Besides, the system supports the revocation of redaction rights, thereby safeguarding individual privacy within EHRs. Our scheme is substantiated to be IND-CPA secure through formal security analysis. Meanwhile, experimental evaluations show that when the number of attributes or access policies reaches 100, our scheme outpaces the RPCH scheme by Xu et al. with a performance improvement of