PRE-based Privacy-Sensitive Healthcare Data Management for Secure Sharing

As a demand for non-face-to-face medical services increase, huge amounts of electronic healthcare data are created and managed online. Since the healthcare data include privacy-sensitive information, security technologies have received considerable attentions from healthcare workers and researchers. On the other hand, sharing for healthcare data is another major issue. Moreover, to manage a large volume of data, efficient security schemes are necessary. To solve privacy, sharing and efficiency problems simultaneously, a new cryptography system is required. In this paper, we propose a proxy re-encryption based healthcare data management model. In the storage process of this model, since data creator encrypts data under system manager's public key and stores them in database, only the system manager can open them. Meanwhile, when someone requires data access, if the system manager approves, the encrypted data is transformed to the data that can be decrypted by the requestor using the proxy re-encryption. As the data undergoes only one encryption process, the operation time will be reduced, and the raw healthcare data will not be revealed. Therefore, it keeps the secrecy of privacy-sensitive healthcare data and delivers data safely.