Investigation on Human-Centric Security Based on Understanding the Role of User Behavior in Information Security
Lihua Wang · 2024
Human Health Information Exchange (HHIE) provides significant benefits to patient assistance, including faster coordinated treatment and higher-quality healthcare. The Office of the National Coordinator (ONC) for Health Information Technology is looking for patient-centric HHIE ideas that can assist shift ownership of information from suppliers to patient. The current system confronts significant challenges to patient-centric HHIE, including privacy and security issues, inaccurate data, and delayed access to relevant records across several medical centres. To ensure accountability and integrity, we suggested a decentralised EMR management (DPEM) Structure based on methods of blockchain. With the following objectives in mind, we suggest a four-layer layout for DPEM: data preparation, data exchange, data storage, and access control/security. (i) We suggest a new elliptic curve-based content extraction signature (EC-CES) that allows patients to filter out sensitive EMR data, hence eliminating privacy information leakage during the data sharing process and ensuring privacy in DPEM. (ii) Blockchain smart contracts are utilised to specify the patients' specified Permissions for access, enabling safe data sharing. (iii) In order to provide secure storage, we store the actual EMRs in a cloud facility. The corresponding indexes of the EMRs are stored on consortium blockchain, which simultaneously optimises data leakage from the EMRs and ensures the integrity of the EMRs. (iv) We created a ciphertext-policy attribute-based encryption (CP-ABE) access control strategy to allow data owners to protect cloud storage while granting access to authorised people via an encrypted link to the cloud for storage with restricted access rules disabled. This enabled control of entry in data sharing. Finally, the security study demonstrates that DPEM is the most effective method of achieving safe data exchange for EMR. We carried out a thorough simulation of this patient-centered HHIE procedure and assessed the viability, stability, security, and resilience of the model quantitatively.