title: FRR: fair remote retrieval of outsourced private medical records in electronic health networks.
abstract: Cloud computing is emerging as the next-generation IT architecture. However, cloud computing also raises security and privacy concerns since the users have no physical control over the outsourced data. This paper focuses on fairly retrieving encrypted private medical records outsourced to remote untrusted cloud servers in the case of medical accidents and disputes. Our goal is to enable an independent committee to fairly recover the original private medical records so that medical investigation can be carried out in a convincing way. We achieve this goal with a fair remote retrieval (FRR) model in which either t investigation committee members cooperatively retrieve the original medical data or none of them can get any information on the medical records. We realize the first FRR scheme by exploiting fair multi-member key exchange and homomorphic privately verifiable tags. Based on the standard computational Diffie-Hellman (CDH) assumption, our scheme is provably secure in the random oracle model (ROM). A detailed performance analysis and experimental results show that our scheme is efficient in terms of communication and computation.
authors.affiliation: School of Information Engineering, Dalian Ocean University, China. Electronic address: wanghuaqun@aliyun.com.
authors.forename: Huaqun
authors.initials: H
authors.lastname: Wang
authors.affiliation: School of Electronic and Information Engineering, Beihang University, China.
authors.forename: Qianhong
authors.initials: Q
authors.lastname: Wu
authors.affiliation: School of Information, Renmin University of China, China.
authors.forename: Bo
authors.initials: B
authors.lastname: Qin
authors.affiliation: Universitat Rovira i Virgili, Department of Computer Engineering and Mathematics, UNESCO Chair in Data Privacy, E-43007 Tarragona, Catalonia, Spain.
authors.forename: Josep
authors.initials: J
authors.lastname: Domingo-Ferrer
mesh_terms: D003198:Computer Simulation; D003284:Contract Services; D057286:Electronic Health Records; D018907:Privacy
keywords: Cloud computing; Fair remote data retrieval; Medical records