基于联盟链的安全和支持高效模糊查询的电子病历共享系统

Secure and Efficient Fuzzy Search for EHR Sharing Based on Consortium Blockchain

电子病历系统由于缺少统一的标准,较难实现跨院的数据共享与模糊的数据查询.基于区块链的数据共享技术为实现跨院的信息互通提供了可能,然而由于区块链的透明性等特点,共享过程依旧存在着安全和隐私泄露的风险.为解决上述问题,本文基于区块链技术和对称密钥隐藏矢量加密(symmetrickey hidden vector encryption,SHVE)算法,设计了一套跨院的电子病历共享系统.为了方便数据共享,设计了统一的电子病历数据格式,并采用区块链平台存储数据;为了解决数据安全和模糊查询的问题,将SHVE算法与基于密文策略属性加密(ciphertext policy attribute-based encryption,CP-ABE)算法相结合,实现了数据的加解密、查询令牌生成、安全检索以及模糊查询功能.实验结果表明本系统具有可行性与实用性.

Due to the lack of unified standards, it is difficult to realize the fuzzy data queries on Electronic health record data over cross-hospital data sharing systems. Blockchain-based data sharing technology provides the possibility to realize cross-hospital information interoperability. However,due to the transparency and other characteristics of blockchain, the sharing process still has the risk of security and privacy leakage. In order to solve the problems, this paper designs a crosshospital electronic health record sharing system based on blockchain and symmetric-key hidden vector encryption(SHVE) algorithm. To facilitate data sharing, this paper designs a unified electronic health record data format and uses blockchain to store data. To solve the problems of data security and fuzzy query, this paper combines the SHVE algorithm with the ciphertext policy attribute-based encryption(CP-ABE) algorithm to realize functions of data encryption and decryption, query token generation,and secure retrieval and fuzzy query. The results of the experiments show that the designed system has good feasibility and practicality.