Ciphertext‐policy attribute‐based encryption with partially hidden access structure and its application to privacy‐preserving electronic medical record system in cloud environment. Issue 18 (8th November 2016)

• Record Type: Journal Article
• Authors: Liu, Lixian; Lai, Junzuo; Deng, Robert H.; Li, Yingjiu
• Is Part Of: Security and communication networks. Volume 9:Issue 18(2016)
• Page Start: 4897
• Page End: 4913
• Publication Date: 2016-11-08
• Subjects: cloud computing -- ciphertext‐policy -- hidden access structure -- privacy‐preserving electronic medical record; Computer networks -- Security measures -- Periodicals; Computer security -- Periodicals; Cryptography -- Periodicals; 005.805
• DOI: 10.1002/sec.1663
• Languages: English
• ISSNs: 1939-0114

Abstract

Abstract: With the development of cloud computing, more and more sensitive data are uploaded to cloud by companies or individuals, which brings forth new challenges for outsourced data security and privacy. Ciphertext‐policy attribute‐based encryption (CP‐ABE) provides fine‐grained access control of encrypted data in the cloud; in a CP‐ABE scheme, an access structure, also referred to as ciphertext‐policy, is sent along with a ciphertext explicitly, and anyone who obtains a ciphertext can know the access structure associated with the ciphertext. In certain applications, access structures contain very sensitive information and must be protected from everyone except the users whose private key attributes satisfy the access structures. In this paper, we propose a new model for CP‐ABE with partially hidden access structure (See Figure 2). In our model, each attribute consists of two parts: an attribute name and its value; if the private key attributes of a user do not satisfy the access structure associated with a ciphertext, the specific attribute values of the access structure are hidden, while other information about the access structure is public. Based on the CP‐ABE scheme proposed by Lewko and Waters1 recently, we then present a concrete construction of CP‐ABE with partially hidden access structure and prove that it is fully secure in the standard model. In addition, we discuss how our new model can be employed to construct a privacy‐preserving electronic medical record system in the cloud environment. Copyright © 2016 John Wiley & Sons, Ltd. Abstract : In the standard ciphertext‐policy attribute‐based encryption schemes, a cleartext access structure is attached to a ciphertext. Unfortunately, cleartext access structures may leak sensitive information about the encrypted data in electronic medical record (EMR) systems as shown in Figure 1. We propose a new model for ciphertext‐policy attribute‐based encryption with partially hidden access structure (Figure 2). In our model, the specific attribute values (i.e., sensitive information) of the access structure are hidden, while other information about the access structure is public.