Cloud computing is becoming increasingly common in the field of health care, in keeping with the rapid advancement of information technology. Sensing data utilization and confidentiality can be enhanced through the efficient and secure sharing of patient information. However, efficient forward secrecy is not supported by the cloud-based data sharing systems currently in use; if a data requester’s secret key is compromised, all previously provided data will be exposed. This paper presents an effective attribute-based data sharing scheme that provides flexible access control and guaranteed firm security over electronic health record (EHR) systems. In order to provide a shared secret key for data sharing that can be encrypted by an access structure over the data requester (DReq) characteristics, this technique combines attribute-based and puncturable encryption. Furthermore, the mutual authentication and shared key establishment are carried out concurrently by the cloud servers and DReqs. By utilizing the bloom filter approach, which effectively facilitates the updating of a secret key without requiring the key distributor to reissue the key, the suggested scheme can accomplish forward secrecy. This scheme complies with the security model, as demonstrated by the security proof. Additionally, the performance evaluation articulates the viability of the proposed plan.