Privacy-Preserving Fine-Grained Outsourcing PHR with Efficient Policy Updating

Abstract

Personal Health Record (PHR) is a novel way of managing individual health. With the help of cloud computing and Ciphertext-Policy Attribute-Based Encryption (CP-ABE), the fine-grained access control, as well as authenticated sharing, can be realized. However, the importance of policy preserving has emerged to be a major security risk in the PHR cloud sharing scenario. Besides, cloud-assist policy updating, as a practical functionality of the PHR system, should also be taken into consideration. In this paper, we present an integrated policy preserving PHR scheme with efficient policy updating. The scheme is proved to be selectively secure under q-BDHE assumption. The evaluation result indicates that our scheme can reach a balanced trade-off in terms of privacy and efficiency.