Security and privacy issues in electronic health network
Security and privacy issues in electronic health network
复制标题
DOI：
10.1007/s11859-013-0967-z
复制
发表时间：
2013-12
影响因子：
--
通讯作者：
Yanhui Ma;Jianwei Liu;Weiran Liu
中科院分区：
文献类型：
--
作者：
Yanhui Ma;Jianwei Liu;Weiran Liu
电子健康网络是一个提供电子健康相关功能的信息系统。在本文中，我们设计的机制，涵盖了EHN的三个重要的安全和隐私问题，包括信任管理，隐私保护和数据共享。首先，我们提出了一个基于分层身份签名（HIBS）的认证密钥协商方案。我们从EHN的社会网络结构中抽象出一个层次结构。为了支持大规模场景，我们在传统的HIBS中引入了一个虚拟签名生成阶段，因此我们的方案即使深度很大也是有效的。其次，我们提出了一种基于对称可搜索加密（SSE）的快速数据搜索方案。为了提高搜索效率，我们在传统的SSE中引入了两级缓存结构。第三，我们提出了一种基于分层身份加密（HIBE）的访问控制方案。为了使它成为一个细粒度的方案，我们组织的数据所有者的文件在层次结构中，并介绍了一个虚拟密钥生成阶段，传统的HIBE。同时，该方案可以很容易地提供授权和撤销功能。此外，我们的方案保证了已知密钥保密性、前向保密性和反向保密性，并具有抵抗合谋攻击的能力。评估结果表明，我们的方案确实达到了安全性和效率。
Electronic health network (EHN) is an information system providing functions involved in e-health. In this paper, we devise mechanisms covering three important security and privacy issues of EHN including trust management, privacy preserving, and data sharing. First, we propose an authenticated key agreement scheme based on hierarchical identity-based signature (HIBS). We abstract a hierarchical architecture from the social network architecture of EHN. To support large-scale scenarios, we introduce a virtual signature generation phase into traditional HIBS, thus our scheme will be efficient even the depth is quite big. Second, we propose a fast data searching scheme based on symmetric searchable encryption (SSE). To improve the searching efficiency, we introduce a two-level cache structure into the traditional SSE. Third, we propose an access control scheme based on hierarchical identity-based encryption (HIBE). To make it a fine-grained scheme, we organize the data owner’s file in hierarchy and introduce a virtual key generation phase to traditional HIBE. Also, the scheme can provide delegation and revocation functions easily. Besides, our schemes guarantee known-key secrecy, forward secrecy, and antidirection secrecy and possess the resistance capability to collude-attack. Evaluation results show that our scheme indeed achieves the security and efficiency.