Zhonghao Li;Jianchang Lai;Jinguang Han;Liquan Chen;Xinyan Yang
{"title":"医疗保健系统中安全数据共享的前向安全等式检验","authors":"Zhonghao Li;Jianchang Lai;Jinguang Han;Liquan Chen;Xinyan Yang","doi":"10.1109/JIOT.2025.3564721","DOIUrl":null,"url":null,"abstract":"In healthcare systems, the protection of the sensitive data of patient during sharing across multiple entities is crucial. Encrypting these data before outsourcing to the healthcare server is an effective method to protect data privacy. As a solution to protect data sharing within healthcare systems, identity-based encryption with equality test (IBEET) is an effective strategy that allows testing whether two ciphertexts encrypted from the same plaintext without certificate management. However, current IBEET schemes often lack of control over the trapdoors’ lifetime, i.e., the malicious server could use trapdoor to test whether two ciphertext generated after the trapdoor encrypted by the same plaintext all the time, potentially leaking sensitive data which the user are unwilling to see. To address this problem, we introduce a forward secure IBEET (FS-IBEET) scheme. This new scheme prevents the malicious server from accessing useful information from newly encrypted files. We perform a thorough security analysis using the random oracle model under the <italic>q</i>-BDHI assumption. Our experiments demonstrate that the performance of our scheme in comparison to other schemes.","PeriodicalId":54347,"journal":{"name":"IEEE Internet of Things Journal","volume":"12 14","pages":"27861-27870"},"PeriodicalIF":8.9000,"publicationDate":"2025-04-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Forward Secure Equality Test for Secure Data Sharing in Healthcare Systems\",\"authors\":\"Zhonghao Li;Jianchang Lai;Jinguang Han;Liquan Chen;Xinyan Yang\",\"doi\":\"10.1109/JIOT.2025.3564721\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"In healthcare systems, the protection of the sensitive data of patient during sharing across multiple entities is crucial. Encrypting these data before outsourcing to the healthcare server is an effective method to protect data privacy. As a solution to protect data sharing within healthcare systems, identity-based encryption with equality test (IBEET) is an effective strategy that allows testing whether two ciphertexts encrypted from the same plaintext without certificate management. However, current IBEET schemes often lack of control over the trapdoors’ lifetime, i.e., the malicious server could use trapdoor to test whether two ciphertext generated after the trapdoor encrypted by the same plaintext all the time, potentially leaking sensitive data which the user are unwilling to see. To address this problem, we introduce a forward secure IBEET (FS-IBEET) scheme. This new scheme prevents the malicious server from accessing useful information from newly encrypted files. We perform a thorough security analysis using the random oracle model under the <italic>q</i>-BDHI assumption. Our experiments demonstrate that the performance of our scheme in comparison to other schemes.\",\"PeriodicalId\":54347,\"journal\":{\"name\":\"IEEE Internet of Things Journal\",\"volume\":\"12 14\",\"pages\":\"27861-27870\"},\"PeriodicalIF\":8.9000,\"publicationDate\":\"2025-04-28\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"IEEE Internet of Things Journal\",\"FirstCategoryId\":\"94\",\"ListUrlMain\":\"https://ieeexplore.ieee.org/document/10978039/\",\"RegionNum\":1,\"RegionCategory\":\"计算机科学\",\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q1\",\"JCRName\":\"COMPUTER SCIENCE, INFORMATION SYSTEMS\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"IEEE Internet of Things Journal","FirstCategoryId":"94","ListUrlMain":"https://ieeexplore.ieee.org/document/10978039/","RegionNum":1,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}
Forward Secure Equality Test for Secure Data Sharing in Healthcare Systems
In healthcare systems, the protection of the sensitive data of patient during sharing across multiple entities is crucial. Encrypting these data before outsourcing to the healthcare server is an effective method to protect data privacy. As a solution to protect data sharing within healthcare systems, identity-based encryption with equality test (IBEET) is an effective strategy that allows testing whether two ciphertexts encrypted from the same plaintext without certificate management. However, current IBEET schemes often lack of control over the trapdoors’ lifetime, i.e., the malicious server could use trapdoor to test whether two ciphertext generated after the trapdoor encrypted by the same plaintext all the time, potentially leaking sensitive data which the user are unwilling to see. To address this problem, we introduce a forward secure IBEET (FS-IBEET) scheme. This new scheme prevents the malicious server from accessing useful information from newly encrypted files. We perform a thorough security analysis using the random oracle model under the q-BDHI assumption. Our experiments demonstrate that the performance of our scheme in comparison to other schemes.
期刊介绍:
The EEE Internet of Things (IoT) Journal publishes articles and review articles covering various aspects of IoT, including IoT system architecture, IoT enabling technologies, IoT communication and networking protocols such as network coding, and IoT services and applications. Topics encompass IoT's impacts on sensor technologies, big data management, and future internet design for applications like smart cities and smart homes. Fields of interest include IoT architecture such as things-centric, data-centric, service-oriented IoT architecture; IoT enabling technologies and systematic integration such as sensor technologies, big sensor data management, and future Internet design for IoT; IoT services, applications, and test-beds such as IoT service middleware, IoT application programming interface (API), IoT application design, and IoT trials/experiments; IoT standardization activities and technology development in different standard development organizations (SDO) such as IEEE, IETF, ITU, 3GPP, ETSI, etc.