title: EPPS: Efficient and Privacy-Preserving Personal Health Information Sharing in Mobile Healthcare Social Networks.
abstract: Mobile healthcare social networks (MHSNs) have emerged as a promising next-generation healthcare system, which will significantly improve the quality of life. However, there are many security and privacy concerns before personal health information (PHI) is shared with other parities. To ensure patients' full control over their PHI, we propose a fine-grained and scalable data access control scheme based on attribute-based encryption (ABE). Besides, policies themselves for PHI sharing may be sensitive and may reveal information about underlying PHI or about data owners or recipients. In our scheme, we let each attribute contain an attribute name and its value and adopt the Bloom filter to efficiently check attributes before decryption. Thus, the data privacy and policy privacy can be preserved in our proposed scheme. Moreover, considering the fact that the computational cost grows with the complexity of the access policy and the limitation of the resource and energy in a smart phone, we outsource ABE decryption to the cloud while preventing the cloud from learning anything about the content and access policy. The security and performance analysis is carried out to demonstrate that our proposed scheme can achieve fine-grained access policies for PHI sharing in MHSNs.
authors.affiliation: National Key Laboratory of Integrated Services Networks, Xidian University, Xi'an 710071, China. jsywow@gmail.com.
authors.forename: Shunrong
authors.initials: S
authors.lastname: Jiang
authors.affiliation: National Key Laboratory of Integrated Services Networks, Xidian University, Xi'an 710071, China. xyzhu@mail.xidian.edu.cn.
authors.forename: Xiaoyan
authors.initials: X
authors.lastname: Zhu
authors.affiliation: The Department of Internet of Things, Jiangsu University, Zhenjiang 212013, China. wanglm@ujs.edu.cn.
authors.forename: Liangmin
authors.initials: L
authors.lastname: Wang
mesh_terms: D016494:Computer Security; D055991:Health Records, Personal; D006801:Humans; D033181:Information Dissemination; D018907:Privacy; D012944:Social Support; D017216:Telemedicine
keywords: attribute-based encryption; bloom filter; mobile healthcare social networks; privacy