Search

Electronics-Health Care is one of the new ideas in the healthcare industry. For analyzing the patient's records, doctors need a centralized record of the patients, which gives useful and enormous information. There will be a threat of leaking of confidential e-health data, which will seriously endanger by modifying the health care data of medical and its individual entities. Protection of the confidential data of patients will be a primary constraint in the health care industry. There is a lot of progressiveness in the human services area as well as there is a lot of usage of the information gathered from various sensors and this information is stored in the cloud. As per the existing security algorithms, there is still some security breach and also it won't get satisfied with integrity and consistency while transferring the data from one vendor to others in the health care system. It also causes high spoofing of IP and side channel hackers. With the increase in the use of the internet, there is an increase in hacking also, especially in the health-care sector, e-commerce, military, and Education. Dealing with the huge volume of information in the electronics-healthcare area requires the processing of patient's information day by day and its memory allocation. Cloud is the best option to store these health records in a distributed manner rather than on a single server. So, whatever the information gathered from it will be encoded on block chain technology and an anonymous digital ring signature will be used to authorize the intended user and maintain the privacy of patient cloud-based data distributed Electronics health record system before sending the information to the cloud storage. In this paper, the protection of Personal data of the patient health data is enhanced with block chain and anonymous ring signatures in the e-healthcare cloud; thus making it suitable for real-time applications. [ABSTRACT FROM AUTHOR]

The maintenance and sharing of electronic medical records are one of the essential tasks in the medical treatment combination. Traditional cloud-based electronic medical record storage system is difficult to realize data security sharing. The tamper resistance and traceability of blockchain technology provide the possibility for the sharing of highly sensitive medical data. This paper proposes a safe sharing scheme of stroke electronic medical records based on the consortium blockchain. The scheme adopts the storage method of ciphertext of medical records stored in the cloud and index of medical records stored on the blockchain. The privacy protection mechanism proposed in this paper innovatively combines proxy reencryption and searchable encryption which supports patient pseudoidentity search. The mechanism could achieve controllable sharing of medical records and precise search. According to the organizational characteristics of the stroke medical treatment combination, this paper proposes an improved Practical Byzantine Fault Tolerance mechanism to reach a consensus between consensus nodes. Then, the proposed scheme is analyzed and evaluated from three aspects of medical record integrity, user privacy, and data security. The results show that the scheme can not only ensure the privacy of patient identity information and private key data but also resist the tampering and deletion attacks of internal and external malicious nodes on the medical record data. Therefore, the proposed scheme is conducive to the improvement of the timeliness of stroke treatment and the safe sharing of electronic medical records in stroke medical treatment combination. [ABSTRACT FROM AUTHOR]

The recent advancement in cloud computing and Internet of Things (IoT) paradigms, paves a way to support the patients through remote monitoring and they can enjoy their health services at home. The medical professional (MP) needs to analyze IoT health data or Electronic Health Records (EHR) from a cloud server using their authorized login credentials. However, the Cloud-IoT network is vulnerable to many malicious attacks, it is necessary to make strong user authentication. Therefore, strong user authentication is a prerequisite for a successful global deployment of centralized healthcare systems. In this paper, we present a secure, efficient authentication protocol to allow MPs to access patient data through a Cloud IoT network. The proposed protocol contains Light Weight Self-Adaptive Honey Encryption (LWSHE) for securing the Internet of Things (IoT) medical data in a cloud server. The traditional Honey encryption algorithm has a message space limitation problem which is overcome through a discrete distribution function in Distribution Transforming Encoder (DTE) which maps the plain text strings into the seed strings. In the honey encryption algorithm, our proposed honeyword generation method can eliminate storage overhead and typo safety problems. Based on the result of the security and performance comparison analysis, the proposed protocol does not only prevents the vulnerable attacks from being performed but also achieves more complex security operations and efficient user authentication. [ABSTRACT FROM AUTHOR]

In recent years, many countries have been trying to integrate electronic health data managed by each hospital to offer more efficient healthcare services. Since health data contain sensitive information of patients, there have been much research that present privacy preserving mechanisms. However, existing studies either require a patient to perform various steps to secure the data or restrict the patient to exerting control over the data. In this paper, we propose patient-controlled attribute-based encryption, which enables a patient (a data owner) to control access to the health data and reduces the operational burden for the patient, simultaneously. With our method, the patient has powerful control capability of his/her own health data in that he/she has the final say on the access with time limitation. In addition, our scheme provides emergency medical services which allow the emergency staffs to access the health data without the patient's permission only in the case of emergencies. We prove that our scheme is secure under cryptographic assumptions and analyze its efficiency from the patient's perspective. [ABSTRACT FROM AUTHOR]

Security and privacy are the first and foremost concerns that should be given special attention when dealing with Wireless Body Area Networks (WBANs). As WBAN sensors operate in an unattended environment and carry critical patient health information, Distributed Denial of Service (DDoS) attack is one of the major attacks in WBAN environment that not only exhausts the available resources but also influence the reliability of information being transmitted. This research work is an extension of our previous work in which a machine learning based attack detection algorithm is proposed to detect DDoS attack in WBAN environment. However, in order to avoid complexity, no consideration was given to the traceback mechanism. During traceback, the challenge lies in reconstructing the attack path leading to identify the attack source. Among existing traceback techniques, Probabilistic Packet Marking (PPM) approach is the most commonly used technique in conventional IP- based networks. However, since marking probability assignment has significant effect on both the convergence time and performance of a scheme, it is not directly applicable in WBAN environment due to high convergence time and overhead on intermediate nodes. Therefore, in this paper we have proposed a new scheme called Efficient Traceback Technique (ETT) based on Dynamic Probability Packet Marking (DPPM) approach and uses MAC header in place of IP header. Instead of using fixed marking probability, the proposed scheme uses variable marking probability based on the number of hops travelled by a packet to reach the target node. Finally, path reconstruction algorithms are proposed to traceback an attacker. Evaluation and simulation results indicate that the proposed solution outperforms fixed PPM in terms of convergence time and computational overhead on nodes. [ABSTRACT FROM AUTHOR]

Searchable encryption is an important cryptographic primitive that enables privacy-preserving keyword search on encrypted electronic medical records (EMRs) in cloud storage. Efficiency of such searchable encryption in a medical cloud storage system is very crucial as it involves client platforms such as smartphones or tablets that only have constrained computing power and resources. In this paper, we propose an efficient secure-channel free public key encryption with keyword search (SCF-PEKS) scheme that is proven secure in the standard model. We show that our SCF-PEKS scheme is not only secure against chosen keyword and ciphertext attacks (IND-SCF-CKCA), but also secure against keyword guessing attacks (IND-KGA). Furthermore, our proposed scheme is more efficient than other recent SCF-PEKS schemes in the literature. [ABSTRACT FROM AUTHOR]

To provide a search functionality for encrypted data, public key encryption with keyword search (PEKS) has been widely recognized. In actual usage, a PEKS scheme should be employed with a PKE scheme since PEKS itself does not support the decryption of data. Since a naive composition of a PEKS ciphertext and a PKE ciphertext does not provide CCA security, several attempts have been made to integrate PEKS and PKE in a joint CCA manner (PEKS/PKE for short). In this paper, we further extend these works by integrating secure-channel free PEKS (SCF-PEKS) and PKE, which we call SCF-PEKS/PKE, where no secure channel is required to send trapdoors. We give a formal security definition of SCF-PEKS/PKE in a joint CCA manner, and propose a generic construction of SCF-PEKS/PKE based on anonymous identity-based encryption, tag-based encryption, and one-time signature. We also strengthen the current consistency definition according to the secure-channel free property, and show that our construction is strongly consistent if the underlying IBE provides unrestricted strong collision-freeness which is defined in this paper. We also show that such an IBE scheme can be constructed by employing the Abdalla et al. transformations (TCC 2010/J. Cryptology 2018). Finally, as an application of SCF-PEKS/PKE, we strengthen the security of encrypted Electronic Medical Record (EMR) system proposed by Guo and Yau (J. Medical Sys. 2015). [ABSTRACT FROM AUTHOR]