FSSR: Fine-Grained EHRs Sharing via Similarity-Based Recommendation in Cloud-Assisted eHealthcare System
FSSR: Fine-Grained EHRs Sharing via Similarity-Based Recommendation in Cloud-Assisted eHealthcare System
复制标题
DOI：
10.1145/2897845.2897870
复制
发表时间：
2016-05
期刊：
影响因子：
--
通讯作者：
Cheng Huang;R. Lu;Hui Zhu;Jun Shao;Xiaodong Lin
中科院分区：
文献类型：
--
作者：
Cheng Huang;R. Lu;Hui Zhu;Jun Shao;Xiaodong Lin
随着电子医疗行业的发展，电子健康记录（EHRs），作为由患者存储和管理的数字健康记录之一，已被认为提供更多的好处。有了电子健康记录，病人可以方便地与医生分享健康记录，并建立一个完整的健康状况。然而，由于电子病历的敏感性，如何保证电子病历的安全性和隐私性成为患者最关心的问题之一。针对如何对共享的电子病历进行细粒度的访问控制、如何保证存储在云端的电子病历的机密性、如何对电子病历进行审计以及如何为患者找到合适的医生等隐私问题，本文提出了一种基于相似度推荐的细粒度电子病历共享方案FSSR。具体来说，我们提出的计划允许患者安全地共享他们的电子病历与一些合适的医生细粒度的隐私访问控制。详细的安全分析证实了其安全性。此外，还通过开发FSSR原型进行了广泛的仿真，性能评估表明FSSR的有效性，在计算成本，存储和通信成本，同时最大限度地减少隐私泄露。
With the evolving of ehealthcare industry, electronic health records (EHRs), as one of the digital health records stored and managed by patients, have been regarded to provide more benefits. With the EHRs, patients can conveniently share health records with doctors and build up a complete picture of their health. However, due to the sensitivity of EHRs, how to guarantee the security and privacy of EHRs becomes one of the most important issues concerned by patients. To tackle these privacy challenges such as how to make a fine-grained access control on the shared EHRs, how to keep the confidentiality of EHRs stored in cloud, how to audit EHRs and how to find the suitable doctors for patients, in this paper, we propose a fine-grained EHRs sharing scheme via similarity-based recommendation accelerated by Locality Sensitive Hashing (LSH) in cloud-assisted ehealthcare system, called FSSR. Specifically, our proposed scheme allows patients to securely share their EHRs with some suitable doctors under fine-grained privacy access control. Detailed security analysis confirms its security prosperities. In addition, extensive simulations by developing a prototype of FSSR are also conducted, and the performance evaluations demonstrate the FSSR's effectiveness in terms of computational cost, storage and communication cost while minimizing the privacy disclosure.