Keyword cross-domain search method and system under privacy protection in healthcare cloud

Abstract

The invention discloses a keyword cross-domain search method and system under the privacy protection in a healthcare cloud. The system comprises a healthcare center (HC), a cloud server (CS) and a data user (DU). The method comprises system initialization, EHRs file and search index encryption, authorization of a search request of the DU and the HC, EHRs re-encrypted ciphertext generation, verification of a query request of the DU and the CS, and reception and decryption of EHRs matched with search. The problem of key distribution between healthcare organizations and patient users in a conventional scheme is solved under the condition that user privacies are not leaked; the number of keys needed to be managed is greatly reduced; the storage overhead is reduced; the EHRs in a ciphertext state can be subjected to accurate and quick multi-keyword cross-domain search; the security of EHRs files and execution of related calculations in a cloud server during encrypted search is ensured; andthe calculations are entrusted to the cloud server, so that the calculation and storage overheads are greatly reduced.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a keyword cross-domain search method and system under privacy protection in a medical cloud. Background technique [0002] In recent years, paper records are gradually being phased out in the healthcare system due to inconvenient storage and management, while digitalization and virtualization are forming an overall market with the development of the global healthcare industry. Electronic medical records can reduce costs , reduce workload, improve medical quality and facilitate sharing with doctors and other features are becoming more and more popular. Due to the informatization of the development of the medical system, the number of Electronic Health Records (Electronic Health Records, hereinafter referred to as EHRs) is also increasing. For many hospitals and medical systems, how to manage and effectively store the growing EHRs is their problem. Current...

AI Technical Summary

Problems solved by technology

However, based on the symmetric cryptosystem, there are many shortcomings in the actual use process: different keys are required between each object, the key distribution is complicated, it is difficult to solve the authentication problem of digital signature and how to send the key safely to Problems such as users' hands are disadvantages of symmetric cryptosystems

And if the adversary obtains the shared key through stealing, man-in-the-middle attack, etc., the adversary can easily obtain the encrypted EHRs files on the cloud server, which is obviously not safe enough

If the medical center updates the key used to encrypt the file after the adversary obtains the key, it will generate huge computing and communication overhead in the distribution of the user key and the re-encryption of the file, so this scheme is not economical and practical.

Images