Secure Attribute-Based Encryption with Access Control to Data Medical Records

Medical record is a document that becomes a communication tool between health workers in providing health services to patients. In the health care system, medical record center data store much complete historical information about the health condition of a patient or a disease that had previously suffered, it is also used to accurately diagnose the illness suffered by the patient. Data centers are very vulnerable to attacks both inside and against outsiders on the system. Required patient control over access based on the attribute of each user at the time of registration to the medical record through a website-based medical record information system that has been integrated into the server. Ciphertext-Policy Attribute-Based Encryption (CP-ABE) is the right choice to protect the system when accessing data in the data center to protect data from illegal users. In this paper, we propose a secure attribute-based encryption with access control to medical record data. Our system was created using 4 access policies in different department groups (Gynecologist, Internist, Pediatrics, Dental and Oral) in a hospital. Based on experimental results with different access policy execution time for the encryption process of approximately 1 s and 0.2 s to decrypt the data.