CP-BDHCA: Blockchain-Based Confidentiality-Privacy Preserving Big Data Scheme for Healthcare Clouds and Applications
CP-BDHCA: Blockchain-Based Confidentiality-Privacy Preserving Big Data Scheme for Healthcare Clouds and Applications
复制标题
DOI：
10.1109/jbhi.2021.3097237
复制
发表时间：
2022-05-01
影响因子：
7.7
通讯作者：
Dev, Kapal
中科院分区：
文献类型：
--
作者：
Ghayvat, Hemant;Pandya, Sharnil;Dev, Kapal
医疗保健大数据（HBD）允许医疗利益相关者分析，访问，检索患者的个人和电子健康记录（EHR）。大多数情况下，这些记录存储在医疗保健云和应用程序（HCA）服务器上，因此会受到终端用户延迟、大量计算、单点故障以及安全和隐私风险的影响。需要一个联合解决方案来解决响应式分析的问题，再加上HBD中的高数据摄取和安全的EHR访问。出于研究空白的动机，本文提出了一种方案，该方案集成了基于区块链（BC）的机密性-隐私（CP）保护方案CP-BDHCA，该方案分两个阶段运行。在第一阶段，提出了基于椭圆曲线密码（ECC）的数字签名框架，HCA-ECC建立会话密钥，用于不同医疗实体之间的安全通信。然后，在第二阶段，提出了一个两步认证框架，该框架集成了Rivest-Shamir-Adleman（RSA）和高级加密标准（AES），称为HCA-RSAE，以保护生态系统免受可能的攻击向量。CP-BDAHCA与现有的HCA云应用程序在响应时间、平均延迟、交易和签名成本、挖掘区块的签名和验证以及抗DoS和DDoS攻击等参数方面进行了比较。我们考虑10个BC节点，并创建一个真实世界的自定义数据集，用于SEER数据集。该数据集有30，000个患者档案，1000个临床账户。基于组合数据集，该方案优于AI 4SAFE、TEE、Secret和IIoTEED等传统方案，具有更低的响应时间。例如，该方案在DDoS中的响应时间非常短，为300 ms。挖掘BC交易的平均签名成本为3.34秒，对于205个交易，签名延迟为1405 ms，准确性比传统的最先进方法提高了约12%。
Healthcare big data (HBD) allows medical stakeholders to analyze, access, retrieve personal and electronic health records (EHR) of patients. Mostly, the records are stored on healthcare cloud and application (HCA) servers, and thus, are subjected to end-user latency, extensive computations, single-point failures, and security and privacy risks. A joint solution is required to address the issues of responsive analytics, coupled with high data ingestion in HBD and secure EHR access. Motivated from the research gaps, the paper proposes a scheme, that integrates blockchain (BC)-based confidentiality-privacy (CP) preserving scheme, CP-BDHCA, that operates in two phases. In the first phase, elliptic curve cryptographic (ECC)-based digital signature framework, HCA-ECC is proposed to establish a session key for secure communication among different healthcare entities. Then, in the second phase, a two-step authentication framework is proposed that integrates Rivest-Shamir-Adleman (RSA) and advanced encryption standard (AES), named as HCA-RSAE that safeguards the ecosystem against possible attack vectors. CP-BDAHCA is compared against existing HCA cloud applications in terms of parameters like response time, average delay, transaction and signing costs, signing and verifying of mined blocks, and resistance to DoS and DDoS attacks. We consider 10 BC nodes and create a real-world customized dataset to be used with SEER dataset. The dataset has 30,000 patient profiles, with 1000 clinical accounts. Based on the combined dataset the proposed scheme outperforms traditional schemes like AI4SAFE, TEE, Secret, and IIoTEED, with a lower response time. For example, the scheme has a very less response time of 300 ms in DDoS. The average signing cost of mined BC transactions is 3,34 seconds, and for 205 transactions, has a signing delay of 1405 ms, with improved accuracy of approximate to 12% than conventional state-of-the-art approaches.