Emergency mobile access to personal health records stored on an untrusted cloud

Authors:
Feras Aljumah;Raymond Hei Man Leung;Makan Pourzandi;Mourad Debbabi
Affiliations:
Concordia University, Montreal, QC, Canada;Concordia University, Montreal, QC, Canada;Concordia University, Montreal, QC, Canada;Concordia University, Montreal, QC, Canada
Venue:
HIS'13 Proceedings of the second international conference on Health Information Science
Year:
2013

Citing 8
Cited 0

How to share a secret

Communications of the ACM
Attribute-based encryption for fine-grained access control of encrypted data

Proceedings of the 13th ACM conference on Computer and communications security
Secure attribute-based systems

Proceedings of the 13th ACM conference on Computer and communications security
Ciphertext-Policy Attribute-Based Encryption

SP '07 Proceedings of the 2007 IEEE Symposium on Security and Privacy
Securing medical records on smart phones

Proceedings of the first ACM workshop on Security and privacy in medical and home-care systems
Privacy preserving EHR system using attribute-based infrastructure

Proceedings of the 2010 ACM workshop on Cloud computing security workshop
Collusion resistant broadcast encryption with short ciphertexts and private keys

CRYPTO'05 Proceedings of the 25th annual international conference on Advances in Cryptology
Fuzzy identity-based encryption

EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques

Quantified Score

Hi-index	0.00

Visualization

Abstract

When storing files on an untrusted cloud, attribute based encryption is the cryptosystem usually chosen to securely encrypt the files while allowing fine grained access. When storing Personal Health Records (PHR), we find that allowing access to a user's emergency medical records (EMRs) during an emergency would be difficult to achieve while ensuring privacy preservation. Providing ECPs with unlimited and unrestricted access to EMRs is not an acceptable solution for a privacy view point. In this work our aim is to allow ECPs the ability to access a patient's EMRs, but only in the case of an emergency, preventing them from abusing their privileges. We propose a solution that solves this problem without requiring the participation of the patient in the process.