Securing Personal Health Record System in Cloud Using User Usage Based Encryption.

Area of Science:

• Health Informatics
• Cloud Computing Security
• Data Privacy

Background:

• Cloud-based Personal Health Records (PHRs) are crucial for collaborative care, but secure data outsourcing and retrieval present challenges.
• Protecting sensitive personal health information during cloud-based data sharing and searching is a significant concern.
• Existing systems may risk sensitive data leakage when handling outsourced electronic health data.

Purpose of the Study:

• To propose a novel diversified access control framework for secure cloud-based PHR systems.
• To enhance secure data sharing and searching capabilities for outsourced confidential health data.
• To prevent sensitive personal information leakage in cloud environments.

Main Methods:

• Implementation of a User Usage Based Encryption (UUBE) framework, leveraging searchable encryption schemes.
• Mapping usage to credentials/accreditations with time allotments for security and privacy attributes (events).
• Employing multicredential routing as an event dissemination strategy for enhanced data user confidentiality.

Main Results:

• The UUBE framework enables secure data access based on matching user credentials with event accreditations.
• Searchable encryption facilitates efficient routing of encrypted health data events.
• Multicredential routing strengthens data user confidentiality by managing credentials based on usage categories.

Conclusions:

• The proposed diversified access control framework effectively secures cloud-based PHRs.
• UUBE and multicredential routing offer a robust solution for protecting sensitive health data in cloud environments.
• This approach ensures efficient, secure, and scalable data access while maintaining user privacy.