Privacy-aware relationship semantics–based XACML access control model for electronic health records in hybrid cloud

Abstract

State-of-the-art progress in cloud computing encouraged the healthcare organizations to outsource the management of electronic health records to cloud service providers using hybrid cloud. A hybrid cloud is an infrastructure consisting of a private cloud (managed by the organization) and a public cloud (managed by the cloud service provider). The use of hybrid cloud enables electronic health records to be exchanged between medical institutions and supports multipurpose usage of electronic health records. Along with the benefits, cloud-based electronic health records also raise the problems of security and privacy specifically in terms of electronic health records access. A comprehensive and exploratory analysis of privacy-preserving solutions revealed that most current systems do not support fine-grained access control or consider additional factors such as privacy preservation and relationship semantics. In this article, we investigated the need of a privacy-aware fine-grained access control model for the hybrid cloud. We propose a privacy-aware relationship semantics-based XACML access control model that performs hybrid relationship and attribute-based access control using extensible access control markup language. The proposed approach supports fine-grained relation-based access control with state-of-the-art privacy mechanism named Anatomy for enhanced multipurpose electronic health records usage. The proposed (privacy-aware relationship semantics-based XACML access control model) model provides and maintains an efficient privacy versus utility trade-off. We formally verify the proposed model (privacy-aware relationship semantics-based XACML access control model) and implemented to check its effectiveness in terms of privacyaware electronic health records access and multipurpose utilization. Experimental results show that in the proposed (privacyaware relationship semantics-based XACML access control model) model, access policies based on relationships and electronic health records anonymization can perform well in terms of access policy response time and space storage.

Attribute-Based Approaches for Secure Data Sharing in Industrial Contexts

“…Kanwal et al [35] proposed a privacy-aware relationship semantics-based XACML access control model designed to protect electronic health records (EHRs) in a hybrid cloud called PRSX-AC. This model is an extension of the standard XACML-ABAC with a semantic relationship-based access control (rel-BAC) hybrid approach.…”

Virtual Pseudonym-Changing and Dynamic Grouping Policy for Privacy Preservation in VANETs

“…The position-mixing query is prepared by each vehicle and sent to the location server as specified in Equation ( 49). On calculating the location query, the location server responds to the vehicle with the desired location, such as the nearest restaurant, gas station, and hospital locations; see Equation (50).…”

“…High-Level Petri Nets (HLPN) can be used for simulation of the proposed scheme or to provide a mathematical representation to analyze the behavior and structure properties of the proposed model [ 50 ]. The benefits of the formal model are the proposed model components and processes interconnections, information flow among the system processes, and information processing task are considered.…”

Detection of Conflicts Between Resource Authorization Rules in Extensible Access Control Markup Language Based on Dynamic Description Logic

“…Focusing on cloud service application scenarios in health services, Ayache et al [3] developed an XACML-based cloud service for verifying ACRs, which realizes data sharing, task invocation and activity coordination across service domains. Kanwal et al [4] tackled the security of data release and sharing of electronic medical records in a hybrid cloud environment, made fine-grained XACML description of resource ACRs in that environment, and thereby improved the capabilities of the ACRs in privacy protection and access control. For safe access to IoT devices in distributed network, Charaf et al [5] proposed an XACML-based access control method for terminal devices, which is reliable, available and confidential.…”