Rapid digitization of healthcare data has created unprecedented opportunities to improve patient care and efficiency of the healthcare system. However, it has also introduced formidable challenges in protecting sensitive health information from evolving cyber threats and ensuring compliance with stringent data privacy regulations. In response to these challenges, this paper presents an infrastructure of a data-centric security model grounded in attribute-based encryption (ABE), fortified by three foundational pillars: the Data Pillar, the Attribute Pillar, and the Governance Pillar. The Data Pillar prioritizes the understanding of healthcare data and applies a security classification and labeling. The Attribute Pillar defines the attributes that might be included in the healthcare system. The Governance Pillar establishes a robust framework for policy management and enforcement by applying an automated access policy extraction and forces it through attribute-based encryption.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Data-Centric Security Model Based on Attribute-Based Cryptography For Healthcare Systems

  • Bachar Kachouh,
  • Layth Sliman,
  • Abed Ellatif Samhat,
  • Kamel Barkaoui

摘要

Rapid digitization of healthcare data has created unprecedented opportunities to improve patient care and efficiency of the healthcare system. However, it has also introduced formidable challenges in protecting sensitive health information from evolving cyber threats and ensuring compliance with stringent data privacy regulations. In response to these challenges, this paper presents an infrastructure of a data-centric security model grounded in attribute-based encryption (ABE), fortified by three foundational pillars: the Data Pillar, the Attribute Pillar, and the Governance Pillar. The Data Pillar prioritizes the understanding of healthcare data and applies a security classification and labeling. The Attribute Pillar defines the attributes that might be included in the healthcare system. The Governance Pillar establishes a robust framework for policy management and enforcement by applying an automated access policy extraction and forces it through attribute-based encryption.