<p>Electronic Health Records (EHRs) have attracted significant attention as digital carriers of medical data with the rise of the Internet of Medical Things (IoMT). Most existing solutions have applied blockchain technology to EHRs to resolve concerns including single points of failure, data security. However, the inherent immutability of blockchain conflicts with user privacy concerns and the need to update medical data. To ensure updates of EHRs and protect user privacy, we propose an RPCH-based data sharing scheme that supports outsourced revocation and ciphertext verifiability. Through a revocation-enabled attribute-based encryption method with built-in integrity validation, we specifically construct ciphertext-verifiable RPCH. We leverage a commitment-based verification mechanism to ensure the data integrity of revoked ciphertexts. Moreover, we enable controllable transaction-level redaction operations through the flexible configuration of access structures. Besides, the system supports the revocation of redaction rights, thereby safeguarding individual privacy within EHRs. Our scheme is substantiated to be IND-CPA secure through formal security analysis. Meanwhile, experimental evaluations show that when the number of attributes or access policies reaches 100, our scheme outpaces the RPCH scheme by Xu et al. with a performance improvement of <InlineEquation ID="IEq1"> <EquationSource Format="TEX">\(42.65\%\)</EquationSource> </InlineEquation>. Overall, our scheme facilitates the redaction of EHRs while minimizing local computational overhead, thereby exhibiting strong potential for deployment in healthcare data management systems.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

A fine-grained EHR data sharing system for IoMT: Efficient revocation outsourcing based on RPCH

  • Siyuan Chen,
  • Pingfan Chang,
  • Zhimin Guo

摘要

Electronic Health Records (EHRs) have attracted significant attention as digital carriers of medical data with the rise of the Internet of Medical Things (IoMT). Most existing solutions have applied blockchain technology to EHRs to resolve concerns including single points of failure, data security. However, the inherent immutability of blockchain conflicts with user privacy concerns and the need to update medical data. To ensure updates of EHRs and protect user privacy, we propose an RPCH-based data sharing scheme that supports outsourced revocation and ciphertext verifiability. Through a revocation-enabled attribute-based encryption method with built-in integrity validation, we specifically construct ciphertext-verifiable RPCH. We leverage a commitment-based verification mechanism to ensure the data integrity of revoked ciphertexts. Moreover, we enable controllable transaction-level redaction operations through the flexible configuration of access structures. Besides, the system supports the revocation of redaction rights, thereby safeguarding individual privacy within EHRs. Our scheme is substantiated to be IND-CPA secure through formal security analysis. Meanwhile, experimental evaluations show that when the number of attributes or access policies reaches 100, our scheme outpaces the RPCH scheme by Xu et al. with a performance improvement of \(42.65\%\) . Overall, our scheme facilitates the redaction of EHRs while minimizing local computational overhead, thereby exhibiting strong potential for deployment in healthcare data management systems.