A New Identity-Based Encryption Scheme Using Blockchain for Electronic Health System
Subject Areas : Information security
Fatemeh Alidadi Shamsabadi
1
,
Shaghayegh Bakhtiari Chehelcheshmeh
2
*
,
Majid Alipour
3
1 - Department of Computer, Faculty of Engineering, Shahrekord Branch, Islamic Azad University, Shahrekord, Iran.
2 - Department of Computer, Faculty of Engineering, Shahrekord Branch, Islamic Azad University, Shahrekord, Iran.
3 - Department of Computer, Faculty of Engineering, Shahrekord Branch, Islamic Azad University, Shahrekord, Iran.
Keywords: Electronic Health System, Identity-Based Encryption, Blockchain, Cloud Computing,
Abstract :
With the development of information technology, electronic health (e-health) systems are used as a common approach to recording patients' medical data. Given that medical information is an essential asset of individuals and the health system, there are severe concerns about secure sharing and preserving this information's privacy. In this paper, we propose a new identity-based encryption (IBE) method by bilinear pairings to ensure the confidentiality of patients' data and their privacy in cloud health systems; in this way, this plan also provides authentication for users using challenge-response mechanisms. In addition, the proposed scheme, using blockchain techniques, ensures integrity and precise access control for shared data. The correctness of the proposed protocol is verified, and its security is formally proven in the standard model. The implementation of our scheme is performed in Java, and the results show that the proposed scheme reduces the computational overhead compared to previous similar methods.
[1] H. Toral-Cruz, D. He, A.D. Mihovska, K.K. Raymond Choo, and M.K. Khan, Reliable and Secure e-Health Networks. Wireless Personal Communications, (2021), 117, 1–6. https://doi.org/10.1007/s11277-021-08104-z.
[2] W. Hsin-Te, and T. Chun-Wei, Toward Blockchains for Health-Care Systems: Applying the Bilinear Pairing Technology to Ensure Privacy Protection and Accuracy in Data Sharing. IEEE Consumer Electronics Magazine, 7 (2018), 65-71. https://doi.org/10.1109/MCE.2018.2816306.
[3] X.A. Wang, J. Ma, F. Xhafa, M. Zhang, and X. Luo, Cost-Effective, Secure E-Health Cloud System Using Identity-Based Cryptographic Techniques. Future Generation Computer Systems, 67 (2017), 242–254. https://doi.org/10.1016/j.future.2016.08.008.
[4] D. Boneh, and M. Franklin, (2001, August). Identity-Based Encryption from the Weil Pairing. In Annual International Cryptology Conference (pp. 213–229). Springer, Berlin. https://doi.org/10.1007/3-540-44647-8_13.
[5] P. Patil, M. Sangeetha, and V. Bhaskar, Blockchain for IoT Access Control, Security and Privacy: A Review. Wireless Personal Communications, 117 (2021), 1815–1834. https://doi.org/10.1007/s11277-020-07947-2.
[6] P. Pandey and R. Litoriya, Securing E-health Networks from Counterfeit Medicine Penetration Using Blockchain. Wireless Personal Communications, 117 (2021), 7–25. https://doi.org/10.1007/s11277-020-07041-7.
[7] H. Wang and Y.J. Song, Secure Cloud-Based EHR System Using Attribute-Based Cryptosystem and Blockchain. Journal of Medical Systems, 42(8) (2018), 152:1–152:9. https://doi.org/10.1007/s10916-018-0994-6.
[8] V. Della Mea, What Is E-Health (2): The Death of Telemedicine? Journal of Medical Internet Research, 3(2) (2001). https://doi.org/10.2196/jmir.3.2.e22.
[9] O. Enaizan, A.A. Zaidan, N.H.M. Alwi, B.B. Zaidan, M.A. Alsalem, O.S. Albahri, and A.S. Albahri, Electronic Medical Record Systems: Decision Support Examination Framework for Individual, Security and Privacy Concerns Using Multi-Perspective Analysis. Health and Technology, 10 (2020), 795–822. https://doi.org/10.1007/s12553-018-0278-7.
[10] J. O'donoghue, and J. Herbert, Data Management within M-Health Environments: Patient Sensors, Mobile Devices, and Databases. Journal of Data and Information Quality, 4 (2012), 1–20. https://doi.org/10.1145/2378016.2378021.
[11] L. Neuhauser, and G.L. Kreps, Online Cancer Communication: Meeting the Literacy, Cultural and Linguistic Needs of Diverse Audiences. Patient Education and Counseling, 71 (2008), 365–377. https://doi.org/10.1016/j.pec.2008.02.015.
[12] L. Neuhauser, and G.L. Kreps, E-Health Communication and Behavior Change: Promise and Performance. Social Semiotics, 20 (2010), 9–27. https://doi.org/10.1080/10350330903438386.
[13] G.L. Kreps, Strategic Use of Communication to Market Cancer Prevention and Control to Vulnerable Populations. Health Marketing Quarterly, 25 (2008), 204–216. https://doi.org/10. 1080/07359680802126327.
[14] J. Benaloh, M. Chase, E. Horvitz and K. Lauter, Patient-Controlled Encryption: Ensuring the Privacy of Electronic Medical Records. In Proceedings of the 2009 ACM Workshop on Cloud Computing Security 2009, 103–114. https://doi.org/10.1145/1655008.1655024.
[15] Y. Xue, X. Mao, Y. Guo, and S. Lv,The Research Advance of Facial Expression Recognition in Human-Computer Interaction. Journal of Image and Graphics, 5 (2009), 764–772.
[16] M. Barua, X. Liang, R. Lu and X. Shen, ESPAC: Enabling Security and Patient-Centric Access Control for E-Health in Cloud Computing, International Journal of Security and Networks, 6 (2011), 67–76. https://doi.org/10.1504/IJSN.2011.043666.
[17] L. Guo, C. Zhang, J. Sun and Y. Fang, Paas: A Privacy-Preserving Attribute-Based Authentication System for E-Health Networks. IEEE Transactions on Mobile Computing, 13 (2012), 1927-1941. https://doi.org/10.1109/ICDCS.2012.45.
[18] M. Li, S. Yu, Y. Zheng, K. Ren and W. Lou, Scalable and Secure Sharing of Personal Health Records in Cloud Computing Using Attribute-Based Encryption. IEEE Transactions on Parallel and Distributed Systems, 24 (2013), 131–143. https://doi.org/10.1109/TPDS.2012.97.
[19] H. Yan, J. Li, X. Li, G. Zhao, S.Y. Lee and J. Shen, Secure Access Control of E-Health System with Attribute-Based Encryption. Intelligent Automation & Soft Computing, 22 (2016), 345–352. https://doi.org/10.1080/10798587.2015.1132586.
[20] X. Boyen, A Tapestry of Identity-Based Encryption: Practical Frameworks Compared. International Journal of Applied Cryptography, 1 (2008), 3–21. https://doi.org/10.1504/IJAC T.2008.017047.
[21] A. Shamir, Identity-Based Cryptosystems and Signature Schemes. Lecture Notes in Computer Science, 84 (1984), 47–53. https://doi.org/10.1007/3-540-39568-7_5.
[22] D. Boneh and M. Franklin, Identity-Based Encryption from the Weil Pairing. SIAM Journal on Computing, 32(3) (2003), 586–615. https://doi.org/10.1137/S0097539701398521.
[23] R. Sakai and M. Kasahara, ID-Based Cryptosystems with Pairing on Elliptic Curve. IACR Cryptology ePrint Archive. 2003.
[24] D. Boneh and X. Boyen, Efficient Selective-ID Secure Identity-Based Encryption without Random Oracles. In International Conference on the Theory and Applications of Cryptographic Techniques, 2004, 223–238. https://doi.org/10.100 7/978-3-540-24676-3_14.
[25] C. Gentry, Practical Identity-Based Encryption without Random Oracles. In Annual International Conference on the Theory and Applications of Cryptographic Techniques, 2006, 445–464. https://doi.org/10.1007/11761679_27.
[26] D. Boneh and X. Boyen, Efficient Selective Identity-Based Encryption without Random Oracles. Journal of Cryptology, 24 (2011), 659–693. https://doi.org/10.1007/s00145-010-9078-6.
[27] D. Galindo, Chosen-Ciphertext Secure Identity-Based Encryption from Computational Bilinear Diffie-Hellman. In International Conference on Pairing-Based Cryptography, 2010, 367–376. https://doi.org/10.1007/978-3-642-17455-1_23.
[28] J.H. Park, K. Lee and D.H. Lee, New Chosen-Ciphertext Secure Identity-Based Encryption with a Tight Security Reduction to the Bilinear Diffie-Hellman Problem. Information Sciences, 325 (2015), 256–270. https://doi.org/10.1016/j.in s.2015.07.011.
[29] W. Susilo, F. Guo and Y. Mu, Efficient Dynamic Threshold Identity-Based Encryption with Constant-Size Ciphertext. Theoretical Computer Science, 609 (2015), 49–59. https://doi.org/10.1016/j.tcs.2015.09.006.
[30] S. Bakhtiari-Chehelcheshmeh and M. Hosseinzadeh,A New Certificateless and Secure Authentication Scheme for Ad-Hoc Networks. Wireless Personal Communications, 94 (2017), 2833–2851. https://doi.org/10.1007/s11277-016-3721-y.
[31] M. Green and G. Ateniese, Identity-Based Proxy Re-Encryption. In International Conference on Applied Cryptography and Network Security, 2007, 288–306. https://doi.org/10.100 7/978-3-540-72738-5_19.
[32] S. Nakamoto, Bitcoin: A Peer-to-Peer Electronic Cash System,2012.
[33] N. Kshetri, Blockchain's Roles in Strengthening Cybersecurity and Protecting Privacy. Telecommunications Policy, 41 (2017), 1027-1038. https://doi.org/10.1016/j.telpol.2017.09.003.
[34] X. Yue, H. Wang, D. Jin, M. Li and W. Jiang, Healthcare Data Gateways: Found Healthcare Intelligence on the Blockchain with Novel Privacy Risk Control. Journal of Medical Systems, 40 (2016), 218. https://doi.org/10.1007/s10916-016-0574-6.
[35] M. Banerjee, J. Lee and K.K. Raymond Choo,A Blockchain Future for the Internet of Things Security: A Position Paper. Digital Communications and Networks, 4 (2018), 149-160. https://doi.org/10.1016/j.dcan.2017.10.006.
[36] A. Azaria, A. Ekblaw, T. Vieira and A. Lippman, Medrec: Using Blockchain for Medical Data Access and Permission Management. Open and Big Data (OBD), International Conference on IEEE, 2016, 25-30. https://doi.org/10.1109/OB D.2016.11.
[37] A. De Caro, V. Iovino and A. Renato, JPBC : Java Pairing Based Cryptography. IEEE Symposium on Computers and Communications, 2011, 850–855. https://doi.org/10.1109/IS CC.2011.5983948E.
|
Journal of Optimization in Soft Computing (JOSC) Vol. 1, Issue 1, pp: (1-11), September-2023 Journal homepage: https://sanad.iau.ir/journal/josc |
|
Paper Type (Research paper)
A New Identity-Based Encryption Scheme Using Blockchain for Electronic Health System
Fatemeh Alidadi Shamsabadi1, Shaghayegh Bakhtiari Chehelcheshmeh1* and Majid Alipour1
1Department of Computer, Faculty of Engineering, Shahrekord Branch, Islamic Azad University, Shahrekord, Iran.
Article Info |
| Abstract |
Article History: Received :2023/8/12 Revised :2023/8/21 Accepted 2023/9/1
|
| With the development of information technology, electronic health (e-health) systems are used as a common approach to recording patients' medical data. Given that medical information is an essential asset of individuals and the health system, there are severe concerns about secure sharing and preserving this information's privacy. In this paper, we propose a new identity-based encryption (IBE) method by bilinear pairings to ensure the confidentiality of patients' data and their privacy in cloud health systems; in this way, this plan also provides authentication for users using challenge-response mechanisms. In addition, the proposed scheme, using blockchain techniques, ensures integrity and precise access control for shared data. The correctness of the proposed protocol is verified, and its security is formally proven in the standard model. The implementation of our scheme is performed in Java, and the results show that the proposed scheme reduces the computational overhead compared to previous similar methods. |
Keywords: Electronic Health System, Identity-Based Encryption, Blockchain, Cloud Computing. |
| |
*Corresponding Author’s Email Address: sh.bakhtiari@iaushk.ac.ir |
1. Introduction
Today, e-health systems are rapidly evolving and becoming operational because these systems increase the quality of health care by enabling the exchange of information between health centers and joint treatment decisions. They also prevent unnecessary tests, misdiagnosis, and repetitive treatments by strengthening links between healthcare institutions [1, 2].
One of the main challenges in developing and advancing electronic health systems is providing confidentiality service and privacy. Since any attack on these systems will lead to irreparable damage, in recent years, many schemes have been proposed to ensure the security and confidentiality of electronic health systems.
Many of these methods are based on public-key protocols. In traditional systems, the public key infrastructure (PKI) requires a trusted third party to issue digital certificates so that users can verify the authenticity of other users' public keys. In addition to increasing the system's complexity, this increases the cost of electronic health systems [3]. In an identity-based encryption system, the identity of users (such as email addresses) is used to generate the keys of users. Thus, there is no need to issue and verify a digital certificate in an identity-based cryptography system [4]. The use of identity-based encryption in electronic health systems makes users comfortable. And also significantly reduces the costs of these types of systems.
Re-encryption proxy is another encryption method that converts ciphertext using the first user's identity to another ciphertext using the second user's identity. Therefore, in addition to preserving the confidentiality of the message, the second user can decrypt the ciphertext. Since the electronic health system needs to provide encrypted information by the patient to other authorized departments using the ID of the medical team, the use of re-encryption proxies in these systems facilitates the patient service process. Also, it reduces the cost of cryptography [3].
In addition to security issues, sharing and synchronizing sensitive information in e-health systems is also very important. Patient information held by the medical team is not readily available to other health centers. As a result, duplicate medical records are created. In addition to being costly for the health care system, this poses other processes for patients, which wastes their time and unnecessarily extra costs. Blockchain, meanwhile, allows healthcare professionals to share this information through a chain of non-tampering blocks rather than storing patient records in separate databases [5, 6].
However, using blocks as a storage place for all information requires a lot of storage space and is expensive. Therefore, the content of patients' data can be stored in encrypted form in the cloud medical providers. Only the access address and a brief description of that information in the cloud providers can be recorded in the blocks to be accessed when needed [7].
Therefore in this research, a new identity-based encryption scheme is presented; Solves issues related to digital certificate management and public key infrastructure complexity. The proposed IBE scheme uses bilinear pairings only in the decryption phase, and the pairing parameter used in the encryption phase is pre-calculated; for this reason, using the proposed IBE reduces the computational overhead in the electronic health system.
The proposed design also can be used in re-encryption and blockchain technology. Due to the high volume of information, the content of patients' medical records is stored as encrypted in cloud storage systems. The access address of each of them is placed in a blockchain to share better and manage this data.
In addition, the effective combination of this scheme and re-encryption proxy provides confidentiality, reduces costs, and increases accessibility in the health system. In this paper, the proposed scheme is proved both in the random oracle and standard models. Also, the implementation results show that the proposed method reduces the running time compared to similar schemes.
The subsequent sections of the paper are organized as follows: In Section 2, an overview of previous schemes is provided. Section 3 describes the requirements for the proposal. In Section 4, the system is presented. In Section 5, the security and efficiency of the scheme are proved and evaluated. Finally, Section 6 concludes the paper.
2. Related Works
E-health is an electronic and communication process aimed at supporting patients' health care, introduced in 1999 [8]. The Electronic Medical Record (EMR) is kept confidential in these systems. E-health records contain information about the health of individuals during their lifetime, which serves as a source of information for physicians, health care providers, and research centers. Using electronic health systems, physicians can easily change health records. Patients also have easy access to their medical records through user interfaces designed to view medical information; In addition, healthcare providers can access patient information in critical situations [9, 3].
However, confidentiality and privacy are the main challenges in developing the health system to record patients' health records [10].
There are currently many suggestions for using cryptography to provide confidentiality in health systems, including symmetric and Asymmetric key methods similar to the anonymous ID technique. A common belief for creating confidentiality and privacy in e-health systems is to encrypt e-health documents in these systems [3].
Thus, data, identifiers, and attribute data keys (metadata) must be encrypted before being stored in an authentication center or resource in the cloud. In addition, establishing access control and key management issues and the cost of its implementation are always the most vital issues of health systems. Hence, cryptographic techniques can implement secure access control mechanisms or key management properties [11–13].
Despite the capabilities of IBE in recent years, very few articles have used these techniques to create confidentiality and privacy in electronic cloud health systems. Therefore, in this section, works close to the subject are expressed.
Benaloh et al. (2009) explored the challenges of protecting patients' privacy in the electronic health record system, arguing that security in such systems should be provided using encryption and access control. They also discussed using cryptography to record electronic medical records, ensuring confidentiality by a patient-controlled cryptography model [14]. In this scheme, the patient can generate and store the cryptographic key; So that the patient's privacy in the computer data center is not compromised. In the same year, Xue et al. proposed an authentication system using identity-based encryption to protect the confidentiality of electronic health networks [15].
In 2011, Barua et al. proposed a plan for the confidentiality and control of patient-centered access to electronic health systems in the cloud [16]. In this scheme, to ensure the privacy of personal health information, the EDPAC technique has been introduced, which enables the system to give data requesters different levels of access based on their role in the system.
In 2012, Guo et al. introduced an authentication system with feature-based confidentiality in the e-health system [17]. In this scheme, to protect patients' personal information while receiving medical services, a framework called PAAS has been proposed to authenticate the attribute of users in the process of authentication of users in the electronic health system to preserve privacy.
In 2013, Li et al. proposed the scalable and secure sharing of personal health records in the cloud using feature-based encryption [18]. This design presents a new patient-centric model with a set of data access control mechanisms for storing personal health documents using the feature-based encryption technique in semi-trusted providers.
In 2016, Yan et al. proposed a new access plan to implement secure access control of personal health documents in electronic health systems based on the original feature-based encryption scheme [19].
According to studies, the schemes [3, 7] increase access to medical records and are considered to be the most relevant plans to the proposed health system. Now, these schemes will be reviewed.
In 2017, Wang et al. presented a new identity-based encryption scheme for utilization in the health system. They explained how to use this scheme to reduce the disadvantages of the methods used in the e-health system. This identity-based encryption scheme can be used in a re-encryption proxy. However, the extensive use of bilinear pairing functions and extended general parameters increases the computational cost in the encryption and decoding phases [3].
In 2018, Wang and Song implemented a hybrid encryption scheme in blockchain technology to share e-health records securely. The use of two attribute-based signature schemes and identity-based encryption in this method dramatically increases the computational overhead and overshadows the scalability of this system [7].
3. Prerequisites for the Proposed Scheme
In this paper, we first introduce a new method for identity-based encryption. The proposed method is then combined with a re-encryption proxy, blockchain technology, and cloud storage systems for electronic health systems. For this purpose, cryptographic methods based on identity are examined in this section, and other concepts related to the proposed design are described.
3.1. Identity-Based Encryption
As the name implies, identity-based encryption uses the user ID (such as Email Address) as the public key in this type of encryption. In this encryption method, Key Generation Center (KGC) is responsible for the authentication of users. The identifiers are registered; KGC creates the private key corresponding to the ID and delivers it to the users. It also creates some public parameters and makes them known to everyone.
The user who intends to send the message first encrypts the message with the recipient's public key obtained directly from her ID and the public parameters provided by the key generation center. The message recipient decrypts the ciphertext using its private key and the public parameters from the key generation center [20]. Shamir first proposed this cryptographic design in 1984 as an identity-based signature (IBS) method [21].
However, Shamir failed to introduce identity-based encryption until Boneh and Franklin 2001 introduced the first practical structure of identity-based encryption based on bilinear pairing groups with proof in the random oracle model [4]. Due to the reasonable length of the key and the cost of computations for the key generation center, this design became the basis for creating IBE methods.
In 2003, Boneh and Franklin introduced another identity-based encryption. This design was presented with slight changes from their first design, such as asymmetric bilinear pairing and the use of two hash functions as a public parameter of the key generation center with proof in the random oracle model [22].
Subsequently, other methods with relatively different structures were proposed, among which the IBE and IBS methods of Sakai and Kasahara 2003 [23] and the IBE method of Boneh and Boyen 2004 [24] were more effective. The reason for this better efficiency was not to use bilinear pairing at encryption, which reduced costs.
In 2006, Gentry introduced an identity-based encryption scheme based on the Boneh and Boyen method, which required the calculation of further pairings in the form of parameters pre-calculated by the key generation center [25]. Gentry design has more resistance than Boneh and Boyen's scheme. Still, it is less efficient than the Sakai and Kasahara designs and the non-random oracle version of Boneh and Boyen, and it also requires complex assumptions [20].
In 2011, Boneh and Boyen introduced an identity-based encryption system. Their system was not based on the random oracle model, and it provided resistance against the chosen-identity attack. This structure did not need to calculate bilinear pairing in the encryption phase. It is only required to calculate two pairing functions in the decryption phase [26]. In 2010, Galindo proposed an identity-based encryption design. It provided chosen-ciphertext security with constant-size ciphertexts under computational Diffie-Hellman's bilinear assumptions in the standard model [27].
In 2015, Park et al. proposed an identity-based encryption scheme with chosen-ciphertext security. They aimed to obtain tight security in the bilinear Diffie Hellman problem [28]. In 2015, Susilo et al. presented an identity-based encryption scheme with a dynamic threshold and constant-size ciphertext. In their design, the sender, by selecting the number of receivers, provides constant-size ciphertext so that it is possible to decrypt only in the presence of all receivers [29].
In 2017, Bakhtiari and Hosseinzadeh introduced an identity-based encryption method that, in addition to encryption, can also use for signing messages. They used their method for proposing a certificateless authentication scheme [30]. In the same year, Wang et al. introduced the e-health system using an identity-based cryptographic scheme that was efficient [3]. This method is optimized for use in re-encryption proxies. The disadvantages of this method are the long public parameters and the use of many bilinear pairing functions in encryption and decryption.
3.2. Re-Encryption Proxy
The concept of re-encryption proxy was introduced in 1998 by Blaze et al. [31]. In this scheme, a semitrusted proxy with information such as a re-encryption key converts the ciphertext into another ciphertext using the public key of the first delegate; So that it is possible to decryption the ciphertext by the private key of the second delegate. In this scheme, the proxy will not access the message's plaintext.
3.3. Blockchain Technology
The first blockchain was introduced in 2008 by Nakamoto to create a consistent database among all members of a decentralized network [32]. Here is an example of its application in the health system to better understand blockchain technology.
People often go to different hospitals and medical centers during their lives, and each time they go, they provide specific and various medical information to these institutions. Hospitals must share patients' medical information confidentially with other authorized institutions to provide accurate, fast, and effective medical services [33]. In addition, they need to address concerns about patients' privacy, mistrust between healthcare providers, scalability, and how to control access to medical information [34, 35].
For this purpose, blockchain technology is used as a suitable solution. Blockchain technology allows the information stored in the blocks to be shared among all network members, making it almost impossible to manipulate the recorded data using cryptographic methods. In addition, access control can be achieved more efficiently by implementing blockchain. When this system is used for large volumes of data, health professionals will be well aware of how accurate the management of this new trend can be [36, 5].
4. Proposed Scheme
In this section, a new identity-based encryption scheme based on bilinear pairings is first proposed. Then, the model of the re-encryption proxy system is presented according to the proposed cryptographic scheme. Finally, the cloud health system for medical information sharing using blockchain technology is described. Table 1 describes the symbols used in the proposed scheme.
Table 1: Symbols of the proposed scheme
Symbol | Definition | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Hash function | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Cyclic group | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Function bilinear pairing on the elliptic curve | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Identity-related to the ith user | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| KGC's private key | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Public parameters | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| The prime group to measure | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| The prime group, which contains all positive integers, is smaller than | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Generator of group | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Private key related to the ith user | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Plaintext | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Ciphertext | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Symmetric cryptographic element | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
δ | One-time digital signature pattern | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
(1) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
(2) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
(3) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| (4) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
(5) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
(6) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
(7) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
(8) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
(9) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
(10) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
(11) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
(12) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
(13) | ||||||||
Schemes | Security Properties | ||||||||
| Confidentiality | Traceability | Authentication | Non-repudiation | Integrity | Optimized in re-encryption proxy | Access control with blockchain | Proof security in the standard model | |
Boneh and Franklin [4] |
|
|
|
|
|
|
|
| |
Boneh and Franklin [22] |
|
|
|
|
|
|
|
| |
Sakai and Kasahara [23] |
|
|
|
|
|
|
|
| |
Boneh and Boyen [24] |
|
|
|
|
|
|
|
| |
Gentry [25] |
|
|
|
|
|
|
|
| |
Boneh and Boyen [26] |
|
|
|
|
|
|
|
| |
Bakhtiari and Hosseinzadeh [30] |
|
|
|
|
|
|
|
| |
Wang et al. [3] |
|
|
|
|
|
|
|
| |
Wang and Song [7] |
|
|
|
|
|
|
|
| |
Proposed scheme |
|
|
|
|
|
|
|
| |
5.3. Performance Evaluation
Less use of bilinear pairing in identity-based encryption schemes reduces computational overhead. Therefore, Table 3 shows the number of bilinear pairing functions used in the three phases of key generation, encryption, decryption in IBE schemes, and their comparison with the proposed method.
Table 3: Efficiency comparison
Schemes | Need to bilinear pairing | ||
KGC | Encryption | Decryption | |
Boneh and Franklin [4] | û | ü | ü |
Boneh and Franklin [22] | û | ü | ü |
Sakai and Kasahara [23] | ü | û | ü |
Boneh and Boyen [24] | ü | û | ü |
Gentry [25] | ü | û | ü |
Boneh and Boyen [26] | ü | û | ü |
Bakhtiari and Hosseinzadeh [30] | û | ü | ü |
Wang et al. [3] | û | ü | ü |
Wang and Song [7] | ü | ü | ü |
Proposed scheme | ü | û | ü |
Then, the superior methods with the least use of bilinear pairings are compared with the proposed method in running time. We obtained the listed results by implementing the mentioned schemes using the JPBC library in the programming language of Java [37] and an environment with specifications stated in Table 4.
Table 4: System specifications for implementation
Platform | Specifications |
Integrated development environment | Eclipse |
The operating system | Ubuntu 16.04 |
CPU | Intel Core i7 3.5GHz |
RAM | 8GB |
Figure 2 shows the running time of the setup and key generation phases of the considered methods in milliseconds. This type is known as type A in the JPBC library. This part of the system, which includes generating public parameters and the master key, is calculated only once in a cryptographic method. The pre-calculated parameters are used in the setup phase in the next times of the key generation, encryption, and decryption phases.
Figure 3 shows the encryption and decryption running time in identity-based encryption schemes. Some identity-based encryption methods also use the bilinear pairing function in the encryption phase. In this case, with each running of the encryption phase, there is a need to calculate bilinear pairing functions. This increases the cost of an IBE system. For this reason, IBE methods that use bilinear pairing calculations only in the decryption phase significantly reduce the computational cost.
As shown in Figure 2, the proposed IBE has a similar running time in setup and key generation phases compared to the method of Boneh and Boyen [24]. Figure 3 also shows that the proposed method in the encryption phase has a 13-millisecond advantage over Boneh and Boyen [24]; But in the decryption phase, the method of Boneh and Boyen [24] has a 3-millisecond advantage over the proposed method.
In this way, in total, the running time of encryption and decryption of the proposed IBE has a shorter running time (about 10 milliseconds), which reduces the cost of the system.
In addition, the proposed IBE method, compared to the IBE method of Wang et al. [3], shows significant changes in reducing the running time of each of the three phases of key generation, encryption, and decryption. Figure 4 compares the running time of the proposed re-encryption proxy with the re-encryption proxy Wang et al. [3]. As the implementation results show, the proposed method reduces the cost of the re-encryption proxy scheme by reducing the computational overhead and improving the running time. In addition, the proposed scheme offers high flexibility and scalability due to the use of blockchain technology.
Figure 2. Compare of running times of setup and key generation phases
Figure 3. Compare of running times of encryption and decryption phases
Figure 4. Compare of running times of the re-encryption proxy
6. Conclusion
In this paper, a secure and efficient cloud health system is proposed for sharing medical data between patients, hospitals, and other healthcare centers. The system includes a new identity-based encryption scheme with improvements in the re-encryption proxy. It can also be used in blockchain technology.
In the proposed method, the content of medical records is stored in the cloud servers, and their access address is located in the blockchain. This work has led to improved memory usage of blocks and more efficient medical data management during sharing. In addition, patients' medical records are encrypted and provided to the members of a blockchain network and the proxy in the cloud; No entity other than authorized users will be able to access the content of patients' medical information.
Also, in the proposed identity-based encryption scheme, bilinear pairing is used only in the decryption phase, and the pairing parameter used in the encryption phase is a predetermined parameter. Another strength of the proposed approach is shortening the sending parameters while preserving system security.
The security analysis showed that the proposed scheme provides more security properties than similar schemes. In this regard, we also proved the security of the proposed IBE in the standard model. In addition, the implementation results showed that the proposed scheme has better running time and lower computational cost than previous similar schemes.
Acknowledgment
The authors sincerely thank this journal for giving chances to proposing the scheme.
References
[1] H. Toral-Cruz, D. He, A.D. Mihovska, K.K. Raymond Choo, and M.K. Khan, Reliable and Secure e-Health Networks. Wireless Personal Communications, (2021), 117, 1–6. https://doi.org/10.1007/s11277-021-08104-z.
[2] W. Hsin-Te, and T. Chun-Wei, Toward Blockchains for Health-Care Systems: Applying the Bilinear Pairing Technology to Ensure Privacy Protection and Accuracy in Data Sharing. IEEE Consumer Electronics Magazine, 7 (2018), 65-71. https://doi.org/10.1109/MCE.2018.2816306.
[3] X.A. Wang, J. Ma, F. Xhafa, M. Zhang, and X. Luo, Cost-Effective, Secure E-Health Cloud System Using Identity-Based Cryptographic Techniques. Future Generation Computer Systems, 67 (2017), 242–254. https://doi.org/10.1016/j.future.2016.08.008.
[4] D. Boneh, and M. Franklin, (2001, August). Identity-Based Encryption from the Weil Pairing. In Annual International Cryptology Conference (pp. 213–229). Springer, Berlin. https://doi.org/10.1007/3-540-44647-8_13.
[5] P. Patil, M. Sangeetha, and V. Bhaskar, Blockchain for IoT Access Control, Security and Privacy: A Review. Wireless Personal Communications, 117 (2021), 1815–1834. https://doi.org/10.1007/s11277-020-07947-2.
[6] P. Pandey and R. Litoriya, Securing E-health Networks from Counterfeit Medicine Penetration Using Blockchain. Wireless Personal Communications, 117 (2021), 7–25. https://doi.org/10.1007/s11277-020-07041-7.
[7] H. Wang and Y.J. Song, Secure Cloud-Based EHR System Using Attribute-Based Cryptosystem and Blockchain. Journal of Medical Systems, 42(8) (2018), 152:1–152:9. https://doi.org/10.1007/s10916-018-0994-6.
[8] V. Della Mea, What Is E-Health (2): The Death of Telemedicine? Journal of Medical Internet Research, 3(2) (2001). https://doi.org/10.2196/jmir.3.2.e22.
[9] O. Enaizan, A.A. Zaidan, N.H.M. Alwi, B.B. Zaidan, M.A. Alsalem, O.S. Albahri, and A.S. Albahri, Electronic Medical Record Systems: Decision Support Examination Framework for Individual, Security and Privacy Concerns Using Multi-Perspective Analysis. Health and Technology, 10 (2020), 795–822. https://doi.org/10.1007/s12553-018-0278-7.
[10] J. O'donoghue, and J. Herbert, Data Management within M-Health Environments: Patient Sensors, Mobile Devices, and Databases. Journal of Data and Information Quality, 4 (2012), 1–20. https://doi.org/10.1145/2378016.2378021.
[11] L. Neuhauser, and G.L. Kreps, Online Cancer Communication: Meeting the Literacy, Cultural and Linguistic Needs of Diverse Audiences. Patient Education and Counseling, 71 (2008), 365–377. https://doi.org/10.1016/j.pec.2008.02.015.
[12] L. Neuhauser, and G.L. Kreps, E-Health Communication and Behavior Change: Promise and Performance. Social Semiotics, 20 (2010), 9–27. https://doi.org/10.1080/10350330903438386.
[14] J. Benaloh, M. Chase, E. Horvitz and K. Lauter, Patient-Controlled Encryption: Ensuring the Privacy of Electronic Medical Records. In Proceedings of the 2009 ACM Workshop on Cloud Computing Security 2009, 103–114. https://doi.org/10.1145/1655008.1655024.
[15] Y. Xue, X. Mao, Y. Guo, and S. Lv,The Research Advance of Facial Expression Recognition in Human-Computer Interaction. Journal of Image and Graphics, 5 (2009), 764–772.
[16] M. Barua, X. Liang, R. Lu and X. Shen, ESPAC: Enabling Security and Patient-Centric Access Control for E-Health in Cloud Computing, International Journal of Security and Networks, 6 (2011), 67–76. https://doi.org/10.1504/IJSN.2011.043666.
[17] L. Guo, C. Zhang, J. Sun and Y. Fang, Paas: A Privacy-Preserving Attribute-Based Authentication System for E-Health Networks. IEEE Transactions on Mobile Computing, 13 (2012), 1927-1941. https://doi.org/10.1109/ICDCS.2012.45.
[18] M. Li, S. Yu, Y. Zheng, K. Ren and W. Lou, Scalable and Secure Sharing of Personal Health Records in Cloud Computing Using Attribute-Based Encryption. IEEE Transactions on Parallel and Distributed Systems, 24 (2013), 131–143. https://doi.org/10.1109/TPDS.2012.97.
[19] H. Yan, J. Li, X. Li, G. Zhao, S.Y. Lee and J. Shen, Secure Access Control of E-Health System with Attribute-Based Encryption. Intelligent Automation & Soft Computing, 22 (2016), 345–352. https://doi.org/10.1080/10798587.2015.1132586.
[21] A. Shamir, Identity-Based Cryptosystems and Signature Schemes. Lecture Notes in Computer Science, 84 (1984), 47–53. https://doi.org/10.1007/3-540-39568-7_5.
[22] D. Boneh and M. Franklin, Identity-Based Encryption from the Weil Pairing. SIAM Journal on Computing, 32(3) (2003), 586–615. https://doi.org/10.1137/S0097539701398521.
[24] D. Boneh and X. Boyen, Efficient Selective-ID Secure Identity-Based Encryption without Random Oracles. In International Conference on the Theory and Applications of Cryptographic Techniques, 2004, 223–238. https://doi.org/10.100 7/978-3-540-24676-3_14.
[25] C. Gentry, Practical Identity-Based Encryption without Random Oracles. In Annual International Conference on the Theory and Applications of Cryptographic Techniques, 2006, 445–464. https://doi.org/10.1007/11761679_27.
[26] D. Boneh and X. Boyen, Efficient Selective Identity-Based Encryption without Random Oracles. Journal of Cryptology, 24 (2011), 659–693. https://doi.org/10.1007/s00145-010-9078-6.
[27] D. Galindo, Chosen-Ciphertext Secure Identity-Based Encryption from Computational Bilinear Diffie-Hellman. In International Conference on Pairing-Based Cryptography, 2010, 367–376. https://doi.org/10.1007/978-3-642-17455-1_23.
[29] W. Susilo, F. Guo and Y. Mu, Efficient Dynamic Threshold Identity-Based Encryption with Constant-Size Ciphertext. Theoretical Computer Science, 609 (2015), 49–59. https://doi.org/10.1016/j.tcs.2015.09.006.
[30] S. Bakhtiari-Chehelcheshmeh and M. Hosseinzadeh,A New Certificateless and Secure Authentication Scheme for Ad-Hoc Networks. Wireless Personal Communications, 94 (2017), 2833–2851. https://doi.org/10.1007/s11277-016-3721-y.
[31] M. Green and G. Ateniese, Identity-Based Proxy Re-Encryption. In International Conference on Applied Cryptography and Network Security, 2007, 288–306. https://doi.org/10.100 7/978-3-540-72738-5_19.
[32] S. Nakamoto, Bitcoin: A Peer-to-Peer Electronic Cash System,2012.
[33] N. Kshetri, Blockchain's Roles in Strengthening Cybersecurity and Protecting Privacy. Telecommunications Policy, 41 (2017), 1027-1038. https://doi.org/10.1016/j.telpol.2017.09.003.
[34] X. Yue, H. Wang, D. Jin, M. Li and W. Jiang, Healthcare Data Gateways: Found Healthcare Intelligence on the Blockchain with Novel Privacy Risk Control. Journal of Medical Systems, 40 (2016), 218. https://doi.org/10.1007/s10916-016-0574-6.
[35] M. Banerjee, J. Lee and K.K. Raymond Choo,A Blockchain Future for the Internet of Things Security: A Position Paper. Digital Communications and Networks, 4 (2018), 149-160. https://doi.org/10.1016/j.dcan.2017.10.006.
[36] A. Azaria, A. Ekblaw, T. Vieira and A. Lippman, Medrec: Using Blockchain for Medical Data Access and Permission Management. Open and Big Data (OBD), International Conference on IEEE, 2016, 25-30. https://doi.org/10.1109/OB D.2016.11.
[37] A. De Caro, V. Iovino and A. Renato, JPBC : Java Pairing Based Cryptography. IEEE Symposium on Computers and Communications, 2011, 850–855. https://doi.org/10.1109/IS CC.2011.5983948E.
Related articles
-
Key Pre-distribution Based on Block Complementation Design in Internet of Things Security
Print Date : 2024-09-29
The rights to this website are owned by the Raimag Press Management System.
Copyright © 2021-2025