Permission Based Access Control for Healthcare Systems

Abstract

The objective of this work is to present a secure and privacy-protected environment to manage Personal Health Record (PHR) data stored in distant cloud. The work aims at providing a cloud-based data storage solution that ensures maximum visibility but not at the cost of data privacy. It presents a technique by which users can read and update data stored in cloud storage depending on whether they are allowed to access that data. For this, data encryption has been used on the data to be stored in the cloud. This has been combined with a permission-based access control mechanism. Experiments show that the access-control mechanism works successfully and that data is accessible to only those who are permitted to access it. The work also passes state-of-the-art security attacks.