A Novel Patient Centric Framework for Data Access Control in Semi-trusted Cloud Servers?

Cloud storage is a model of networked online storage where data is stored in virtualized pools of storage which are generally hosted by third parties. Personal health record (PHR) is an emerging patient-centric model of health information exchange, Issues such as risks of privacy exposure, scalability in key management, flexible access, and efficient user revocation, have the most important challenges s o we propose a novel patient-centric framework and a suite of mechanisms for data access control to PHRs stored in semi trusted servers. To achieve fine-grained and scalable data access control for PHRs, we leverage attribute-based encryption (ABE) techniques to encrypt each patient’s PHR file. This project also supports multiple owner scenarios and divides the users in the system into multiple security domains that greatly reduce the key management complexity for owners and users. We implement this system and evaluate atop DriveHQ cloud to demonstrate that our new system provides Secure Data Access over outsourced data.