{"title":"BACASE-SH: Blockchain-based authenticated certificate-less asymmetric searchable encryption for smart healthcare","authors":"Arian Arabnouri, Alireza Shafieinejad","doi":"10.1007/s12083-024-01687-x","DOIUrl":null,"url":null,"abstract":"<p>Nowadays, smart healthcare and Electronic Health Record (EHR) play a significant role in simplifying the experience of medical treatment and cuts down the trivial work of paramedics. However, this poses significant challenges for organizations, including the management, transfer and protection of EHR which is vital for correct detection. To overcome these challenges, cloud computing presented which offers various attractive features for EHR management such as data availability, elasticity, and ubiquitous computation. However, the use of cloud computing introduces confidentiality and privacy concerns which can lead to human health threat. A trivial solution for this problem is encryption which makes searching a desired document infeasible, more specifically in big data scenarios. Although searchable encryption is a candidate solution, it suffers from keyword guessing attacks, malicious service providers, lack of trust, data integrity, and fairness. In this paper, we propose BACASE-SH framework that leverages blockchain technology to EHR integrity and availability insurance, fair payment, and establish trust among the involved parties. Moreover, we present a certificate-less authenticated asymmetric searchable encryption scheme to address challenges such as data owner (patient) and data user (physician) identity and keyword guessing attacks. The scheme is implemented using a smart contract, and the evaluation results show its efficiency.</p>","PeriodicalId":49313,"journal":{"name":"Peer-To-Peer Networking and Applications","volume":"21 1","pages":""},"PeriodicalIF":3.3000,"publicationDate":"2024-05-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Peer-To-Peer Networking and Applications","FirstCategoryId":"94","ListUrlMain":"https://doi.org/10.1007/s12083-024-01687-x","RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q2","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}
引用次数: 0
Abstract
Nowadays, smart healthcare and Electronic Health Record (EHR) play a significant role in simplifying the experience of medical treatment and cuts down the trivial work of paramedics. However, this poses significant challenges for organizations, including the management, transfer and protection of EHR which is vital for correct detection. To overcome these challenges, cloud computing presented which offers various attractive features for EHR management such as data availability, elasticity, and ubiquitous computation. However, the use of cloud computing introduces confidentiality and privacy concerns which can lead to human health threat. A trivial solution for this problem is encryption which makes searching a desired document infeasible, more specifically in big data scenarios. Although searchable encryption is a candidate solution, it suffers from keyword guessing attacks, malicious service providers, lack of trust, data integrity, and fairness. In this paper, we propose BACASE-SH framework that leverages blockchain technology to EHR integrity and availability insurance, fair payment, and establish trust among the involved parties. Moreover, we present a certificate-less authenticated asymmetric searchable encryption scheme to address challenges such as data owner (patient) and data user (physician) identity and keyword guessing attacks. The scheme is implemented using a smart contract, and the evaluation results show its efficiency.
期刊介绍:
The aim of the Peer-to-Peer Networking and Applications journal is to disseminate state-of-the-art research and development results in this rapidly growing research area, to facilitate the deployment of P2P networking and applications, and to bring together the academic and industry communities, with the goal of fostering interaction to promote further research interests and activities, thus enabling new P2P applications and services. The journal not only addresses research topics related to networking and communications theory, but also considers the standardization, economic, and engineering aspects of P2P technologies, and their impacts on software engineering, computer engineering, networked communication, and security.
The journal serves as a forum for tackling the technical problems arising from both file sharing and media streaming applications. It also includes state-of-the-art technologies in the P2P security domain.
Peer-to-Peer Networking and Applications publishes regular papers, tutorials and review papers, case studies, and correspondence from the research, development, and standardization communities. Papers addressing system, application, and service issues are encouraged.