Secure Cloud-Based EHR System Using Attribute-Based Cryptosystem and Blockchain

Area of Science:

• Computer Science
• Cryptography
• Health Informatics

Background:

• Electronic Health Records (EHRs) require robust security for confidentiality, authentication, integrity, and access control.
• Existing cryptographic systems can be complex to manage for diverse security needs in EHRs.

Purpose of the Study:

• To propose a novel, unified cryptographic approach for secure EHR systems.
• To enhance medical data security, integrity, and traceability using attribute-based cryptosystems and blockchain technology.

Main Methods:

• Utilized attribute-based encryption (ABE) and identity-based encryption (IBE) for data encryption.
• Implemented identity-based signatures (IBS) for digital signatures.
• Introduced a new cryptographic primitive, combined attribute-based/identity-based encryption and signature (C-AB/IB-ES).
• Integrated blockchain technology for data integrity and traceability.

Main Results:

• The proposed C-AB/IB-ES primitive unifies ABE, IBE, and IBS functions within a single cryptosystem.
• Simplified system management by eliminating the need for multiple cryptographic systems.
• Ensured enhanced confidentiality, authentication, integrity, and fine-grained access control for EHRs.
• Demonstrated a practical application in a medical insurance scenario.

Conclusions:

• The developed secure EHR system effectively addresses critical data security requirements.
• The C-AB/IB-ES primitive offers a streamlined and efficient cryptographic solution for EHR management.
• Blockchain integration provides robust data integrity and traceability, crucial for healthcare applications.