A Framework Provides Authorized Personnel with Secure Access to Their Electronic Health Records

Cloud-based data storage has become ubiquitous in e-commerce, education, research, and health care. Among these industries, health care has the potential to leverage cloud technology to store electronic health records (EHRs) and reduce costs associated with maintaining manual paper-based records. The storage, retrieval, and maintenance of electronic health records for healthcare providers have been challenging due to the influx of patients and the requirement to retain their records for extended periods. Consequently, many healthcare providers are keenly interested in transitioning their EHRs to cloud-based platforms. The risks mentioned above stem from storing electronic health records in distant geographical locations that may not be familiar to healthcare providers. Despite the existing proposals in the literature to address security concerns, there remains a demand for a proficient security framework capable of managing all security issues associated with using cloud storage for EHRs. The present study introduces a security framework that incorporates mechanisms to address confidentiality, integrity, and access control. The framework ensures secure storage and retrieval of electronic health records (EHRs) in cloud-based environments. The research makes a significant contribution by proposing a confidentiality mechanism named Segregation and Preserve Privacy of Sensitive Data in Cloud Storage (SPPSICS). This encryption technique is specifically designed to safeguard the privacy of sensitive data in electronic health records (EHRs) that are stored in cloud storage. The proposed mechanism endeavors to partition the sensitive and insensitive attributes of electronic health records (EHRs) and employ strong encryption techniques to safeguard the sensitive attributes.