Securing electronic medical records using attribute-based encryption on mobile devices

Joseph A. Akinyele; Matthew W. Pagano; Matthew D. Green; Christoph U. Lehmann; Zachary N J Peterson; Aviel D. Rubin

doi:10.1145/2046614.2046628

Securing electronic medical records using attribute-based encryption on mobile devices

Joseph A. Akinyele, Matthew W. Pagano, Matthew D. Green, Christoph U. Lehmann, Zachary N J Peterson, Aviel D. Rubin

School of Medicine

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

81 Scopus citations

Abstract

We provide a design and implementation of self-protecting electronic medical records (EMRs) using attribute-based encryption on mobile devices. Our system allows healthcare organizations to export EMRs to locations outside of their trust boundary. In contrast to previous approaches, our solution is designed to maintain EMR availability even when providers are offline, i.e., where network connectivity is not available. To balance the needs of emergency care and patient privacy, our system is designed to provide fine-grained encryption and is able to protect individual items within an EMR, where each encrypted item may have its own access control policy. We implemented a prototype system using a new key- and ciphertext-policy attribute-based encryption library that we developed. Our implementation, which includes an iPhone app for storing and managing EMRs offline, allows for flexible and automated policy generation. An evaluation of our design shows that our ABE library performs well, has acceptable storage requirements, and is practical and usable on modern smartphones.

Original language	English (US)
Title of host publication	Proceedings of the ACM Conference on Computer and Communications Security
Pages	75-86
Number of pages	12
DOIs	https://doi.org/10.1145/2046614.2046628
State	Published - 2011
Event	1st ACM Workshop on Security and Privacy in Smartphones and Mobile Devices, SPSM'11, Held in Association with the 18th ACM Conference on Computer and Communications Security, CCS 2011 - Chicago, IL, United States Duration: Oct 17 2011 → Oct 17 2011

Other

Other	1st ACM Workshop on Security and Privacy in Smartphones and Mobile Devices, SPSM'11, Held in Association with the 18th ACM Conference on Computer and Communications Security, CCS 2011
Country/Territory	United States
City	Chicago, IL
Period	10/17/11 → 10/17/11

Keywords

access control
attribute-based encryption
continuity of care record
electronic medical record
medical security
mobile device
privacy
public-key cryptography

ASJC Scopus subject areas

Software
Computer Networks and Communications

Access to Document

10.1145/2046614.2046628

Cite this

Akinyele, JA, Pagano, MW, Green, MD, Lehmann, CU, Peterson, ZNJ & Rubin, AD 2011, Securing electronic medical records using attribute-based encryption on mobile devices. in Proceedings of the ACM Conference on Computer and Communications Security. pp. 75-86, 1st ACM Workshop on Security and Privacy in Smartphones and Mobile Devices, SPSM'11, Held in Association with the 18th ACM Conference on Computer and Communications Security, CCS 2011, Chicago, IL, United States, 10/17/11. https://doi.org/10.1145/2046614.2046628

@inproceedings{92deef195a434e89b27ae6bd76bb279f,

title = "Securing electronic medical records using attribute-based encryption on mobile devices",

abstract = "We provide a design and implementation of self-protecting electronic medical records (EMRs) using attribute-based encryption on mobile devices. Our system allows healthcare organizations to export EMRs to locations outside of their trust boundary. In contrast to previous approaches, our solution is designed to maintain EMR availability even when providers are offline, i.e., where network connectivity is not available. To balance the needs of emergency care and patient privacy, our system is designed to provide fine-grained encryption and is able to protect individual items within an EMR, where each encrypted item may have its own access control policy. We implemented a prototype system using a new key- and ciphertext-policy attribute-based encryption library that we developed. Our implementation, which includes an iPhone app for storing and managing EMRs offline, allows for flexible and automated policy generation. An evaluation of our design shows that our ABE library performs well, has acceptable storage requirements, and is practical and usable on modern smartphones.",

keywords = "access control, attribute-based encryption, continuity of care record, electronic medical record, medical security, mobile device, privacy, public-key cryptography",

author = "Akinyele, {Joseph A.} and Pagano, {Matthew W.} and Green, {Matthew D.} and Lehmann, {Christoph U.} and Peterson, {Zachary N J} and Rubin, {Aviel D.}",

year = "2011",

doi = "10.1145/2046614.2046628",

language = "English (US)",

isbn = "9781450310000",

pages = "75--86",

booktitle = "Proceedings of the ACM Conference on Computer and Communications Security",

note = "1st ACM Workshop on Security and Privacy in Smartphones and Mobile Devices, SPSM'11, Held in Association with the 18th ACM Conference on Computer and Communications Security, CCS 2011 ; Conference date: 17-10-2011 Through 17-10-2011",

}

TY - GEN

T1 - Securing electronic medical records using attribute-based encryption on mobile devices

AU - Akinyele, Joseph A.

AU - Pagano, Matthew W.

AU - Green, Matthew D.

AU - Lehmann, Christoph U.

AU - Peterson, Zachary N J

AU - Rubin, Aviel D.

PY - 2011

Y1 - 2011

N2 - We provide a design and implementation of self-protecting electronic medical records (EMRs) using attribute-based encryption on mobile devices. Our system allows healthcare organizations to export EMRs to locations outside of their trust boundary. In contrast to previous approaches, our solution is designed to maintain EMR availability even when providers are offline, i.e., where network connectivity is not available. To balance the needs of emergency care and patient privacy, our system is designed to provide fine-grained encryption and is able to protect individual items within an EMR, where each encrypted item may have its own access control policy. We implemented a prototype system using a new key- and ciphertext-policy attribute-based encryption library that we developed. Our implementation, which includes an iPhone app for storing and managing EMRs offline, allows for flexible and automated policy generation. An evaluation of our design shows that our ABE library performs well, has acceptable storage requirements, and is practical and usable on modern smartphones.

AB - We provide a design and implementation of self-protecting electronic medical records (EMRs) using attribute-based encryption on mobile devices. Our system allows healthcare organizations to export EMRs to locations outside of their trust boundary. In contrast to previous approaches, our solution is designed to maintain EMR availability even when providers are offline, i.e., where network connectivity is not available. To balance the needs of emergency care and patient privacy, our system is designed to provide fine-grained encryption and is able to protect individual items within an EMR, where each encrypted item may have its own access control policy. We implemented a prototype system using a new key- and ciphertext-policy attribute-based encryption library that we developed. Our implementation, which includes an iPhone app for storing and managing EMRs offline, allows for flexible and automated policy generation. An evaluation of our design shows that our ABE library performs well, has acceptable storage requirements, and is practical and usable on modern smartphones.

KW - access control

KW - attribute-based encryption

KW - continuity of care record

KW - electronic medical record

KW - medical security

KW - mobile device

KW - privacy

KW - public-key cryptography

UR - http://www.scopus.com/inward/record.url?scp=80755181009&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=80755181009&partnerID=8YFLogxK

U2 - 10.1145/2046614.2046628

DO - 10.1145/2046614.2046628

M3 - Conference contribution

AN - SCOPUS:80755181009

SN - 9781450310000

SP - 75

EP - 86

BT - Proceedings of the ACM Conference on Computer and Communications Security

T2 - 1st ACM Workshop on Security and Privacy in Smartphones and Mobile Devices, SPSM'11, Held in Association with the 18th ACM Conference on Computer and Communications Security, CCS 2011

Y2 - 17 October 2011 through 17 October 2011

ER -

Securing electronic medical records using attribute-based encryption on mobile devices

Abstract

Other

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this