Implementing Security-Enhanced PHR System in the Cloud Using FAME

Personal Health Record (PHR) plays an important role in realizing the exchange and interaction of medical information as well as in managing chronic diseases. In the recent decade, plenty of researches have been carried out to resolve the secure sharing issue of PHR in the cloud via access control schemes. Attribute-based Encryption (ABE) is a promising technique, which implements access control by introducing the access policy. When ABE is used to construct access control scheme in the cloud, hiding and updating access policy have always been two research hotspots. However, all of the existing solutions only consider one of these two issues separately. How to combine policy hiding and policy updating to achieve secure and efficient access control has always been avoided. Furthermore, the practical deployments of traditional ABE in the medical environment are limited by its small attribute universe. In this paper, we propose a policy hiding and updating ABE (PHU-ABE) based on the Fast Attribute-based Encryption(FAME) to tackle these challenges. We argue the security of PHU- ABE. The experimental results demonstrate that our scheme not only protects users' privacy but also realizes efficient policy updating.