Secure dynamic access control scheme of PHR in cloud computing

Journal of Medical Systems

Volumn 36, Issue 6, 2012, Pages 4005-4020

  Chen, Tzer Shyong ^a   Liu, Chia Hui ^b   Chen, Tzer Long ^c   Chen, Chin Sheng ^a   Bau, Jian Guo ^d   Lin, Tzu Ching ^a  

^a TUNGHAI UNIVERSITY   (Taiwan)

^b ST JOHN'S UNIVERSITY   (Taiwan)

^c TAIWAN UNIVERSITY   (Taiwan)

^d HUNGKUANG UNIVERSITY   (Taiwan)

Author keywords

Access control; Cloud computing; Key management; Lagrange interpolation; Personal health records

Indexed keywords

CLIENT SERVER APPLICATION; CLINICAL EFFECTIVENESS; CLOUD COMPUTING; COMPUTER PROGRAM; COMPUTER SECURITY; CONFERENCE PAPER; HEALTH SERVICE; HUMAN; INFORMATION TECHNOLOGY; INTERNET; MEDICAL INFORMATION; MEDICAL INFORMATION SYSTEM; MEDICAL RECORD; MEDICAL TECHNOLOGY; PERSONAL HEALTH RECORD; PUBLIC HEALTH;

ACCESS TO INFORMATION; ALGORITHMS; COMPUTER SECURITY; CONFIDENTIALITY; ELECTRONIC HEALTH RECORDS; HEALTH RECORDS, PERSONAL; INFORMATION STORAGE AND RETRIEVAL; INTERNET;

EID: 84867855240     PISSN: 01485598     EISSN: 1573689X     Source Type: Journal    
DOI: 10.1007/s10916-012-9873-8     Document Type: Conference Paper

References (41)

1. Committee on Quality of Health Care in America IoM, Crossing the quality chasm. National Academy Press, Washington, DC, 2001.
2. Kaelber, D. C.; Jha, A. K.; Johnston, D.; Middleton, B.; and Bates, D. W.; A research agenda for personal health records. J. Am. Med. Inform. Assoc. 15(6):729-736, 2008.
3. Pagliari, C.; Detmer, D.; and Singleton, P.; Potential of electronic personal health records. Br. Med. J. 335(7615):330-333, 2007.
4. National Research Council, Networking health: prescriptions for the internet. National Academy Press, Washington, DC, 2000.
5. AHIMA, AMIA, The value of personal health records: a joint position statement for consumers of healthcare. J. Am. Med. Inform. Assoc. 78(4):22-24, 2007.
6. Tang, P. C.; Ash, J. S.; Bates, D. W.; Overhage, J. M.; and Sands, D. Z.; Personal health records: definitions, benefits, and strategies for overcoming barriers to adoption. J. Am. Med. Inform. Assoc. 13(2):121-126, 2006.
7. Li, M.; Yu, S.; Ren, K.; and Lou, W.; Securing Personal Health Records in Cloud Computing: Patient-centric and Fine-grained Data Access Control in Multi-owner Settings, Security and Privacy in Communication Networks, pp. 89-106, 2010.
8. Shortliffe, E. H.; The evolution of electronic medical records. Acad. Med. 74:414-419, 1999.
9. Cimino, J. J.; Socratous, S. A.; and Clayton, P. D.; Internet as clinical information system: application development using the world wide Web. J. Am. Med. Informat. Assoc. 2:273-284, 1995.
10. Schneider, J. H.; Online personal medical records: Are they reliable for acute/critical care? Soc. Crit. Care Med. 29:196-201, 2001.
11. Department of Health and Human Services, Security and electronic signature standards. Fed. Regist. 63(155):43241-43243, 1998.
12. Google health, Available: http://www.google.com/intl/en-US/health/about/ index.html
13. Microsoft health Vault, Available:http://www. healthvault.com/Personal/ index.html
14. US Public Law, Health Insurance Portability and Accountability Act of 1996, 104th Congress, Public Law 104-191, 1996.
15. Yanga, C. M.; Lina, H. C.; Changb, P.; and Jianc, W. S.; Taiwan's Perspective on electronic medical Records' security and privacy protection: lessons learned from HIPAA. Comput. Meth. Programs. Biomed. 82:277-282, 2006.
16. Qualys On Demand Vulnerability Management, CASE STUDY: Geisinger Health SystemBringing HIPAA Compliance to an Electronic Medical Record System, http://www.qualys.com/docs/geisinger.pdf
17. Meeting HITECH's Challenge to the Health Care Industry, An Oracle White Paper, May 2010.
18. Atluri, V.; and Huang, W.; An Authorization Model for Workflows, Proceedings of the Fourth European Symposium on Research in Computer Security, pp. 25-27, 1996.
19. Barkley, J. F.; Ferraiolo, D. F.; and Kuhn, D. R.; A role based access control model and reference implementation within a corporate intranet. ACM Trans. Inform. Syst.Secur. (TISSEC) 2:34-64, 1999.
20. Botha, R.; CoSAWoE - A Model for Context-sensitive Access Control in Workflow Environments, South Africa computer journal, 2001.
21. Coyne, E.; Fenstein, H.; Sandhu, R.; and Youman, C.; Role-based access control models. IEEE Computer 29(2):38-47, 1996.
22. Denning, D. E.; Cryptographic Checksums for Multilevel Database Security, Proceedings of the 1984 IEEE Symposium on Security and Privacy, pp. 52-61, 1984.
23. Bardram, J. E.; Pervasive healthcare as a scientific discipline. Methods. Inform. Med. 47:129-142, 2008.
24. http://www.tafm.org.tw/data/012/meeting/209.pdf
25. US Department of Health and Human Services, Personal Health Records and Personal Health Record Systems, National Committee on Vital and Health Statistics, pp. 15, 2006.
26. Vaquero, L. M.; Rodero-Merino, L.; Caceres, J.; and Lindner, M.; A break in the clouds: towards a cloud definition. ACM SIGCOMM Comput. Comm. 39(1):50-55, 2008.
27. Mell, P. and Grance, T.; The NIST Definition of Cloud Computing, National Institute of Standards and Technology. 2009.
28. Brunette, G. and Mogull, R.; Security Guidance for Critical Areas of Focus in Cloud Computing V2.1, Cloud Security Alliance, 2009.
29. Gens, F.; New IDC IT Cloud Services Survey: Top Benefits and Challenges, IDC eXchange, 2009
30. Minister of Justice, Personal Information Protection and Electronic Documents Act (PIPEDA), 2011.
31. Benaloh,J.; Chase,M.; Horvitz,E.; and Lauter, K.; Patient Controlled Encryption: Ensuring Privacy of Electronic Medical Records, In Proceedings of the ACM workshop on Cloud computing security, pp. 103-114, 2009.
32. Stalling,W.; Network and Network Security - Principles and Practice, Prentice Hall International Edition, pp. 1-14, 1995.
33. Stallings, W.; Cryptography and Network Security, Principles and Practice, Prentice Hall, 2003
34. AIM (Advance Informatics in Medicine), Secure Environment for Information Systems in Medicine, SEISMED (A2033)/SP14/HILD/05.07. 95.
35. Shamir, A.; Identity-based Cryptosystems and Signature Schemes, Advances in Cryptology-Proceedings of CRYPTO'84, Springer-Verlag LNCS 196, pp.47-53, 1985.
36. National Bureau of Standards, FIPS pub. 46, Data Encryption Standard, US Department of Commerce, January 1977.
37. Lai, X.; and Massey, J.; A proposal for a New block encryption standard, Proceedings of Eurocrypt'91, Springer-Verlag. LNCS 473:389-404, 1991.
38. Miller, V.; Use of Elliptic Curves in Cryptography, Advances in Cryptology-Crypto'85. LNCS 218:417-426, 1985.
39. Rivest, R.; Shamir, A.; and Adleman, L.; A method for obtaining digital signatures and public-Key cryptosystems. Commun. ACM 21(2):120-126, 1978.
40. ElGamal, T.; A Public-Key Cryptosystem and a Signature Scheme based on Discrete Logarithms, Advances in Cryptology-Crypto'85, Springer-Verlag. LNCS 196:10-18, 1985.
41. Koblitz, N.; Elliptic curve cryptosystems. Math. Comput. 48:203-209, 1985.