Cloud-based Encrypted EHR System with Semantically Rich Access Control and Searchable Encryption

Author/Creator ORCID

Date

Department

Program

Citation of Original Publication

Redwan Walid, Karuna Pande Joshi, SeungGeol Choi, and Dae-young Leroy Kim, Cloud-based Encrypted EHR System with Semantically Rich Access Control and Searchable Encryption, 2020 IEEE International Conference on Big Data (Big Data), 19 March, 2021; https://doi.org/10.1109/BigData50022.2020.9378002

Rights

This item is likely protected under Title 17 of the U.S. Copyright Law. Unless on a Creative Commons license, for uses protected by Copyright Law, contact the copyright holder or the author.
Public Domain Mark 1.0
This work was written as part of one of the author's official duties as an Employee of the United States Government and is therefore a work of the United States Government. In accordance with 17 U.S.C. 105, no copyright protection is available for such works under U.S. Law.

Abstract

Cloud-based electronic health records (EHR) systems provide important security controls by encrypting patient data. However, these records cannot be queried without decrypting the entire record. This incurs a huge amount of burden in network bandwidth and the client-side computation. As the volume of cloud-based EHRs reaches Big Data levels, it is essential to search over these encrypted patient records without decrypting them to ensure that the medical caregivers can efficiently access the EHRs. This is especially critical if the caregivers have access to only certain sections of the patient EHR and should not decrypt the whole record. In this paper, we present our novel approach that facilitates searchable encryption of large EHR systems using Attribute-based Encryption (ABE) and multi-keyword search techniques. Our framework outsources key search features to the cloud side. This way, our system can perform keyword searches on encrypted data with significantly reduced costs of network bandwidth and client-side computation.