Ensuring Privacy and Security in E- Health Records

Jayneel Vora, Prit Italiya, Sudeep Tanwar, Sudhanshu Tyagi, Neeraj Kumar, Mohammad S. Obaidat, Kuei-Fang Hsiao

Abstract: Mobile medicine and health care have been adopted on a very large scale with support from the influx of medical devices and increased usability of remote health services. These are combined with an approachable interest of the patients and a readily approachable conscience about their healthcare. This leads to a huge set of medical data. These data sets require secure transfer, archival and access. In this study, we have proposed an efficient approach to preserve the identity and also protect the privacy of clinical data using highly effective encryption scheme. Moreover, we have also discussed an authorization framework using access of varying degrees. Medical records are often accessed by various entities with varying degrees of authorization. In this study, we have implemented the AT&T scheme for managing the access control mechanism of patients data. Further, encryption is undertaken using ARCANA, that provides hierarchically satisfied access to various data resources. It utilizes the XACML access model to formulate the access control framework. The primary reason for using this model is the regulation to access the data through AT&T based on XACML policies. In addition to this, the encrypting of medical data using various authorization techniques have been required for the proper data access regulation. Which may impact trust of the users in the e-health paradigm and in turn increase the large-scale usability.