A Secure Healthcare Personal Data Sharing Scheme based on Updatable Encryption and Proxy-Re-Encryption

Abstract

We propose a secure hybrid Updatable Encryption - Proxy Re-Encryption (UE-PRE) data sharing scheme intended for use in a healthcare information system. It is assumed that data in this system are stored in a cloud, which may be untrusted. A user of the system can delegate access rights to other users using Proxy Re-Encryption and revoke them using Updatable Encryption. In addition, encryption keys can be rotated regularly and/or occasionally without the need for reencryption. The concrete parameters of the components of the proposed hybrid UE-PRE scheme are given. Security and efficiency of the proposed solutions are analyzed.