An Efficient and Secure Revocation-Enabled Attribute-Based Access Control for eHealth in Smart Society

Abstract

The ever-growing ecosystem of the Internet of Things (IoT) integrating with the ever-evolving wireless communication technology paves the way for adopting new applications in a smart society. The core concept of smart society emphasizes utilizing information and communication technology (ICT) infrastructure to improve every aspect of life. Among the variety of smart services, eHealth is at the forefront of these promises. eHealth is rapidly gaining popularity to overcome the insufficient healthcare services and provide patient-centric treatment for the rising aging population with chronic diseases. Keeping in view the sensitivity of medical data, this interfacing between healthcare and technology has raised many security concerns. Among the many contemporary solutions, attribute-based encryption (ABE) is the dominant technology because of its inherent support for one-to-many transfer and fine-grained access control mechanisms to confidential medical data. ABE uses costly bilinear pairing operations, which are too heavy for eHealth’s tiny wireless body area network (WBAN) devices despite its proper functionality. We present an efficient and secure ABE architecture with outsourcing intense encryption and decryption operations in this work. For practical realization, our scheme uses elliptic curve scalar point multiplication as the underlying technology of ABE instead of costly pairing operations. In addition, it provides support for attribute/users revocation and verifiability of outsourced medical data. Using the selective-set security model, the proposed scheme is secure under the elliptic curve decisional Diffie–Hellman (ECDDH) assumption. The performance assessment and top-ranked value via the help of fuzzy logic’s evaluation based on distance from average solution (EDAS) method show that the proposed scheme is efficient and suitable for access control in eHealth smart societies.

ABAC as Access Control Solution for Digital Evidence Storage

“…Furthermore, access control for a chain of custody is similar to the access control issue for medical records in a Healthcare Information System. In this case, [24], [25] it provides a solution for the access control model for a collaborative environment in medical records. The analogy applied is a condition where several doctors from different departments handling a patient can access a medical record.…”

“…Some of the discussions include the requirements needed when interacting with digital evidence, as presented by [26] and [27], and the use of the Attribute-Based Access Control (ABAC) model to explain access control policies and XACML as an implementation of the policy language used as a hierarchical access control model proposed by [16]. Furthermore, despite the different domains, several access control solutions in the medical record/health record submitted by [25], [28] can be used to build access control solutions relevant to digital evidence.…”

Current security and privacy posture in wireless body area networks

“…Attackers can tamper with the devices, extract sensitive data, or inject malicious code. Implementing physical security measures such as tamper-resistant packaging, secure device placement, and access control to WBAN infrastructure can mitigate these risks [60], [61].…”

Dynamic Secure Access Control and Data Sharing Through Trusted Delegation and Revocation in a Blockchain-Enabled Cloud-IoT Environment

“…The revocation process is implemented to revoke malicious users or attributes, to increase security efficiency. However, this can lead to various attacks due to lack of time-based revocation [20]. In this paper, secure access control-based sharing of data is carried out in a decentralized manner.…”