Research On Access Control About Personal Health Record Based On CP-ABE And RT

With the rapid development of economic and the improvement of people's living standards, people are increasingly concerned about their health. In order to achieve the informatization of medical resources, the rapid development of computer and network technology encourages people to use them into their Personal Health Record, Electronic Health Management, Telemedicine, E-Health Service and other applications. Personal Health Record, related to the health medical information of pepole's whole life, plays a vital role to people's health supervision. However, people have the concerns of privacy losing on using Personal Health Records.In this thesis, to remove the concerns of privacy losing on using Personal Health Record, the classical access control methods are analyzed. On the basis, the access control method based on Cipher-Policy Attribute-Based Encryption(CP-ABE) and Role-Based Trust Management(RT) is designed to implement the access control of pepole's Personal Health Record. In the case of the owner having the ability to authorize, the access control method based on CP-ABE realizes the access control of their own Personal Health Records. This method not only enables people encrypting their own Personal Health Records to ensure the security of storage and transmission before uploading them, but also achieves the fine-grained access control for Personal Health Record. In the case of the owner unable to authorize, the access control method based on RT realizes the access control of the decryption keys stored in advance in the Emergency Department about their own Personal Health Record. This method allows the medical staffs to get the relevant decryption key, thus ensuring the safety of people. In this thesis, to facilitate people to access the relevant data, a portal about PHR is designed. And to solve the problem of data storage, the data is stored in the cloud. Finally, the experiments show that the access control method about Persona Health Record based on CP-ABE and RT is feasible.