Data-Centric Security Model Based on Attribute-Based Cryptography For Healthcare Systems
摘要
Rapid digitization of healthcare data has created unprecedented opportunities to improve patient care and efficiency of the healthcare system. However, it has also introduced formidable challenges in protecting sensitive health information from evolving cyber threats and ensuring compliance with stringent data privacy regulations. In response to these challenges, this paper presents an infrastructure of a data-centric security model grounded in attribute-based encryption (ABE), fortified by three foundational pillars: the Data Pillar, the Attribute Pillar, and the Governance Pillar. The Data Pillar prioritizes the understanding of healthcare data and applies a security classification and labeling. The Attribute Pillar defines the attributes that might be included in the healthcare system. The Governance Pillar establishes a robust framework for policy management and enforcement by applying an automated access policy extraction and forces it through attribute-based encryption.