Logo
ScienceStack
Table of Contents
Fetching ...
Sign In

S3PHER: Secure and Searchable System for Patient-driven HEalth data shaRing

Ivan Costa, Ivone Amorim, Eva Maia, Pedro Barbosa, Isabel Praca

TL;DR

This paper addresses secure patient centered sharing of health data and consent management by combining Proxy Re-Encryption, Searchable Encryption, and Homomorphic Encryption. S3PHER provides two integrated modules Data Sharing and SE enabling patients to grant revoke and audit access while enabling private search over encrypted medical data. The authors implement these ideas in Rust using Umbral PRE and TFHE based SE and validate performance with end to end simulations and real datasets. Results indicate scalable performance with respect to data size and keyword dimensionality, supporting practical deployment for GDPR HIPAA compliant healthcare data sharing.

Abstract

Healthcare data contains some of the most sensitive information about an individual, yet sharing this data with healthcare practitioners can significantly enhance patient care and support research efforts. However, current systems for sharing health data between patients and caregivers do not fully address the critical security requirements of privacy, confidentiality, and consent management. Furthermore, compliance with regulatory laws such as GDPR and HIPAA is often deficient, largely because patients typically are asked to provide general consent for healthcare entities to access their data. Recognizing the limitations of existing systems, we present S3PHER, a novel approach to sharing health data that provides patients with control over who accesses their data, what data is accessed, and when. Our system ensures end to end privacy by integrating a Proxy ReEncryption Scheme with a Searchable Encryption Scheme, utilizing Homomorphic Encryption to enable healthcare practitioners to privately search and access patients' documents. The practicality and benefits of S3PHER are further validated through end to end deployment and use case analyses, with tests on real datasets demonstrating promising execution times.

S3PHER: Secure and Searchable System for Patient-driven HEalth data shaRing

TL;DR

This paper addresses secure patient centered sharing of health data and consent management by combining Proxy Re-Encryption, Searchable Encryption, and Homomorphic Encryption. S3PHER provides two integrated modules Data Sharing and SE enabling patients to grant revoke and audit access while enabling private search over encrypted medical data. The authors implement these ideas in Rust using Umbral PRE and TFHE based SE and validate performance with end to end simulations and real datasets. Results indicate scalable performance with respect to data size and keyword dimensionality, supporting practical deployment for GDPR HIPAA compliant healthcare data sharing.

Abstract

Healthcare data contains some of the most sensitive information about an individual, yet sharing this data with healthcare practitioners can significantly enhance patient care and support research efforts. However, current systems for sharing health data between patients and caregivers do not fully address the critical security requirements of privacy, confidentiality, and consent management. Furthermore, compliance with regulatory laws such as GDPR and HIPAA is often deficient, largely because patients typically are asked to provide general consent for healthcare entities to access their data. Recognizing the limitations of existing systems, we present S3PHER, a novel approach to sharing health data that provides patients with control over who accesses their data, what data is accessed, and when. Our system ensures end to end privacy by integrating a Proxy ReEncryption Scheme with a Searchable Encryption Scheme, utilizing Homomorphic Encryption to enable healthcare practitioners to privately search and access patients' documents. The practicality and benefits of S3PHER are further validated through end to end deployment and use case analyses, with tests on real datasets demonstrating promising execution times.
Paper Structure (22 sections, 1 figure, 2 tables)

This paper contains 22 sections, 1 figure, 2 tables.

Table of Contents

  1. Introduction
  2. Background
  3. Homomorphic Encryption
  4. Proxy Re-Encryption
  5. Searchable Encryption
  6. S3PHER
  7. Concept Idea
  8. Design Goals
  9. Security Analysis
  10. Performance Evaluation
  11. Data Sharing Module
  12. Searchable Encryption Module
  13. Healthcare System Simulation
  14. Simulation Set-up
  15. Use-cases
  16. ...and 7 more sections

Figures (1)

  • Figure 1: S3PHER System Design (Blue arrows represent steps related to the Searchable Encryption Module; Purple arrows represent steps related to the Data Sharing Module).