Analysis and improvement of a fair remote retrieval protocol for private medical records. (5th June 2015)

• Record Type: Journal Article
• Authors: Deng, Jiang; Xu, Chunxiang; Wu, Huai; Chen, Jie
• Other Names: Zhang Yunquan guestEditor.; Zhang Ji‐Lin guestEditor.; Notare Mirela Sechi Moretti Annoni guestEditor.; Li Gang guestEditor.; Niu Wenjia guestEditor.; Guo Li guestEditor.; Batten Lynn guestEditor.; Liu Yinlong guestEditor.; Cai Guoyong guestEditor.
• Is Part Of: Concurrency and computation. Volume 28:Number 6(2016)
• Page Start: 1918
• Page End: 1929
• Publication Date: 2015-06-05
• Subjects: cloud computing -- data integrity -- security analysis; Parallel processing (Electronic computers) -- Periodicals; Parallel computers -- Periodicals; 004.35
• DOI: 10.1002/cpe.3556
• Languages: English
• ISSNs: 1532-0626

Abstract

Summary: Cloud computing, as a new‐generation IT architecture, offers an applicable approach for the medical storage and exchange in electronic health networks. However, it also brings the security and privacy concerns because patients lost physical control of their health information. Therefore, it is critical to maintain fairly retrievable to the private medical records over suspicious cloud servers. Wang proposed a fair remote retrieval (FRR) model to enable an independent third party to secure that it is integrated and retrievable to outsource private medical records. One distinctive feature of FRR is to support and address the medical tangle between hospitals and patients, and employ a committee to recover the necessary original data. Unfortunately, FRR cannot ensure the integrity of the remote medical records as claimed. Specifically, a malicious cloud server could cheat the verifier that its medical information were well‐maintained. But in fact, it only holds the hash values of the original data. Moreover, it can generate a valid but malicious response without being detected by the verifier, and all the medical records are discarded with the help of tag queries. Finally, we present an improved protocol named an improved fair remote retrieval protocol (IFR) 2 to fix the security minor faults with preserving all the properties of FRR. Copyright © 2015 John Wiley & Sons, Ltd.