S3PHER: Secure and Searchable System for Patient-driven HEalth data shaRing

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Costa, Ivan, Amorim, Ivone, Maia, Eva, Barbosa, Pedro, Praca, Isabel
Natura: Preprint
Pubblicazione: 2024
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866910413754466304
author Costa, Ivan
Amorim, Ivone
Maia, Eva
Barbosa, Pedro
Praca, Isabel
author_facet Costa, Ivan
Amorim, Ivone
Maia, Eva
Barbosa, Pedro
Praca, Isabel
contents Healthcare data contains some of the most sensitive information about an individual, yet sharing this data with healthcare practitioners can significantly enhance patient care and support research efforts. However, current systems for sharing health data between patients and caregivers do not fully address the critical security requirements of privacy, confidentiality, and consent management. Furthermore, compliance with regulatory laws such as GDPR and HIPAA is often deficient, largely because patients typically are asked to provide general consent for healthcare entities to access their data. Recognizing the limitations of existing systems, we present S3PHER, a novel approach to sharing health data that provides patients with control over who accesses their data, what data is accessed, and when. Our system ensures end to end privacy by integrating a Proxy ReEncryption Scheme with a Searchable Encryption Scheme, utilizing Homomorphic Encryption to enable healthcare practitioners to privately search and access patients' documents. The practicality and benefits of S3PHER are further validated through end to end deployment and use case analyses, with tests on real datasets demonstrating promising execution times.
format Preprint
id arxiv_https___arxiv_org_abs_2404_11372
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle S3PHER: Secure and Searchable System for Patient-driven HEalth data shaRing
Costa, Ivan
Amorim, Ivone
Maia, Eva
Barbosa, Pedro
Praca, Isabel
Cryptography and Security
E.3; H.3.1; H.3.2; H.3.3
Healthcare data contains some of the most sensitive information about an individual, yet sharing this data with healthcare practitioners can significantly enhance patient care and support research efforts. However, current systems for sharing health data between patients and caregivers do not fully address the critical security requirements of privacy, confidentiality, and consent management. Furthermore, compliance with regulatory laws such as GDPR and HIPAA is often deficient, largely because patients typically are asked to provide general consent for healthcare entities to access their data. Recognizing the limitations of existing systems, we present S3PHER, a novel approach to sharing health data that provides patients with control over who accesses their data, what data is accessed, and when. Our system ensures end to end privacy by integrating a Proxy ReEncryption Scheme with a Searchable Encryption Scheme, utilizing Homomorphic Encryption to enable healthcare practitioners to privately search and access patients' documents. The practicality and benefits of S3PHER are further validated through end to end deployment and use case analyses, with tests on real datasets demonstrating promising execution times.
title S3PHER: Secure and Searchable System for Patient-driven HEalth data shaRing
topic Cryptography and Security
E.3; H.3.1; H.3.2; H.3.3
url https://arxiv.org/abs/2404.11372