Abstract
With the emergence of blockchain technology, the process of healthcare data storage has shifted from traditional storage mode to online mode. This has become possible due to the various benefits associated with the blockchain technology like immutability which means data can’t be changed or erased once it’s recorded on the blockchain. Next one is availability which means data is available in real time and verifiability which means the legitimacy of data being kept may be verified by all nodes on the blockchain. In case of healthcare where sensitive data is being stored, it is not acceptable that this data is visible to all as it raises the privacy concerns. All data is visible to other nodes in the network. Therefore, there is an alarming need of a secure access control mechanism that will ensure that only authorized and selective parties are able to see the personal medical data. In this paper, we address this issue by proposing hierarchical ABE (Attribute Based Encryption) based access control mechanism on blockchain. We explain why data encryption alone cannot solve this issue and then propose a framework that utilizes hierarchical CP-ABE (Ciphertext Policy Attribute Based Encryption) access control mechanism to set permission rights for the different parties involved. We show that our framework provides scalability and fine grained access control, i.e., every data element is given its own access policy. We present a thorough security analysis of our proposed framework and show that it is secure and resistant to collusion and cheating attacks. We prove the accuracy of the functionality of the proposed scheme using BAN logic.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Zuo, Y., Kang, Z., Xu, J., Chen, Z.: BCAS: a blockchain-based ciphertext-policy attribute-based encryption scheme for cloud data security sharing. Int. J. Distrib. Sensor Netw. 17, 155014772199961 (2021)
Pournaghi, S.M., Bayat, M., Farjami, Y.: MedSBA: a novel and secure scheme to share medical data based on blockchain technology and attribute-based encryption. J. Ambient Intell. Hum. Comput. 11(11), 4613–4641 (2020). https://doi.org/10.1007/s12652-020-01710-y
Malamas, V., Kotzanikolaou, P., Dasaklis, T.K., Burmester, M.: A hierarchical multi blockchain for fine grained access to medical data. IEEE Access 8, 134393–134412 (2020)
Lee, T.-F., Li, H.-Z., Hsieh, Y.-P.: A blockchain-based medical data preservation scheme for telecare medical information systems. Int. J. Inf. Secur. 20(4), 589–601 (2020). https://doi.org/10.1007/s10207-020-00521-8
Chen, Y., Ding, S., Xu, Z., Zheng, H., Yang, S.: Blockchain-based medical records secure storage and medical service framework. J. Med. Syst. 43(1), 1–9 (2019)
Zhang, A., Lin, X.: Towards secure and privacy-preserving data sharing in e-health systems via consortium blockchain. J. Med. Syst. 42(8), 1–18 (2018). https://doi.org/10.1007/s10916-018-0995-5
Li, H., Zhu, L., Shen, M., Gao, F., Tao, X., Liu, S.: Blockchain-based data preservation system for medical data. J. Med. Syst. 42(8), 1–13 (2018). https://doi.org/10.1007/s10916-018-0997-3
Patel, V.: A framework for secure and decentralized sharing of medical imaging data via blockchain consensus. Health Inf. J. 25(4), 1398–1411 (2019)
Esposito, C., De Santis, A., Tortora, G., Chang, H., Choo, K.R.: Blockchain: a panacea for healthcare cloud-based data security and privacy? IEEE Cloud Comput. 5(1), 31–37 (2018)
Ali, O., Shrestha, A., Soar, J., Wamba, S.F.: Cloud computing-enabled healthcare opportunities, issues, and applications: a systematic review. Int. J. Inf. Manag. 43, 146–158 (2018)
Azaria, A., Ekblaw, A., Vieira, T., Lippman, A.: MedRec: using blockchain for medical data access and permission management, In: 2016 2nd International Conference on Open and Big Data (OBD), pp. 25–30 (2016)
Ahuja, R., Mohanty, S.K., Sakurai, K.: A scalable attribute-set-based access control with both sharing and full-fledged delegation of access privileges in cloud computing. Comput. Electr. Eng. 57, 241–256 (2017)
Ahuja, R., Mohanty, S.K.: A scalable attribute-based access control scheme with flexible delegation cum sharing of access privileges for cloud storage. IEEE Trans. Cloud Comput. 8(1), 32–44 (2017)
Zhiqiang, G., Lingsong, H., Hang, T., Cong, L.: A cloud computing based mobile healthcare service system. In: 2015 IEEE 3rd International Conference on Smart Instrumentation (ICSIMA), Measurement and Applications, Kuala Lumpur, Malaysia, pp. 1–6 (2015)
Sultan, N.: Making use of cloud computing for healthcare provision: opportunities and challenges. Int. J. Inf. Manag. 34, 177–184 (2014)
Bethencourt, J., Sahai, A., Waters, B.: Ciphertext-policy attribute-based encryption. In: 2007 IEEE Symposium on Security and Privacy (SP 2007) (2007)
Antonopoulos, A.M.: Mastering Bitcoin: Unlocking Digital Crypto-Currencies, 1st edn. O’Reilly Media, Inc., Newton (2014)
Burrows, M., Abadi, M., Needham, R.M.: A logic of authentication. Proc. Royal Soc. Lond. A Math. Phys. Sci. 426(1871), 233–271 (1989)
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2022 The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd.
About this paper
Cite this paper
Mittal, S., Ghosh, M. (2022). Secure and Scalable Attribute Based Access Control Scheme for Healthcare Data on Blockchain Platform. In: Giri, D., Mandal, J.K., Sakurai, K., De, D. (eds) Proceedings of International Conference on Network Security and Blockchain Technology. ICNSBT 2021. Lecture Notes in Networks and Systems, vol 481. Springer, Singapore. https://doi.org/10.1007/978-981-19-3182-6_22
Download citation
DOI: https://doi.org/10.1007/978-981-19-3182-6_22
Published:
Publisher Name: Springer, Singapore
Print ISBN: 978-981-19-3181-9
Online ISBN: 978-981-19-3182-6
eBook Packages: EngineeringEngineering (R0)