ESPAC: Enabling Security and Patient-centric Access Control for eHealth in cloud computing
Mrinmoy Barua, Xiaohui Liang, Rongxing Lu, Xuemin Shen · International Journal of Security and Networks · 2011
We consider the problem of patient self-controlled access privilege to highly sensitive Personal Health Information (PHI), where PHI is expected to be securely stored in cloud storage for uninterrupted anytime, anywhere remote access. In order to assure the privacy of PHI, we propose Efficient and Secure Patient-centric Access Control (ESPAC) scheme which allows data requesters to have different access privileges based on their roles, and then assigns different attribute sets to them. Extensive security and performance analyses demonstrate that the ESPAC scheme is able to achieve desired security requirements with acceptable communication delay.