期刊名称：International Journal of Innovative Research in Computer and Communication Engineering
印刷版ISSN：2320-9798
电子版ISSN：2320-9801
出版年度：2018
卷号：6
期号：11
页码：8668-8672
DOI：10.15680/IJIRCCE.2018. 0611015
出版社：S&S Publications
摘要：The Personal Health Record (PHR) is an emerging framework of health information exchange, which is
often stored at cloud servers. But there are still various privacy problems as personal health information could be
discovered to unauthorized people. To guarantee the patients control over to their own PHRs, it is a method to encrypt
the PHRs before storing on cloud. But still issues such as risks of privacy, efficiency in key administration, flexible
access and efficient user administration, have still remained the important challenges toward achieving better,
cryptographically imposed data access control. ABE. This paper we proposes a methodology called SeSPHR for secure
sharing of the PHRs in the cloud. The SeSPHR scheme ensures patient-centric control on the PHRs and preserves the
confidentiality of the PHRs. The patients store the encrypted PHRs on the un-trusted cloud servers and selectively grant
access to different types of users on different portions of the PHRs. A semi-trusted proxy called Setup and Reencryption
Server (SRS) is introduced to set up the public/private key pairs and to produce the re-encryption keys.
Moreover, the methodology is secure against insider threats and also enforces a forward and backward access control.
Furthermore, we formally analyze and verify the working of SeSPHR methodology through the High Level Petri Nets
(HLPN).
关键词：Access control; cloud computing; Personal Health Records; privacy
