基于格的可撤销属性的个人健康档案共享方案

Personal Health Record Scheme with Attribute Revocation from Lattice

个人健康档案共享是一项高效便利的医疗信息交换服务。数据拥有者可以上传个人档案至第三方云数据服务器以实现信息共享,但数据的隐私安全值得考虑。文章采用格基上基于密文策略的属性基加密算法,在保证数据隐私安全的同时实现属性的细粒度访问控制,以解决个人健康档案共享系统中访问权限变动的问题。最后,在标准模型下基于误差学习问题证明了该方案是选择属性安全和选择明文安全的。

Personal health record(PHR)sharing is an efficient and convenient service to exchange medical information.To achieve information sharing,the data owners upload the personal files to a thirdparty cloud data server.However,the data privacy is worth considering.This scheme provides the data confidentiality and achieves fine-grained access to attributes based on ciphertext-policy attribute-based encryption(CP-ABE)scheme.Moreover,our attribute revocation property is used to handle the changes of user access permissions.Finally,the scheme is proved to be secure under the selective-attribute and chosen plaintext attack model under the learning with error(LWE)problem without random oracles.