OPTIMIZED APPROACH FOR ACCESS CONTROL AND PRIVACY-PRESERVING IN CLOUD-BASED E-HEALTHCARE SYSTEMS

Abstract: Electronic health record (EHRs), telemedicine, and Internet-of-Medical-Things (IoMT) device operations are streamlined through cloud-based healthcare systems that have provided scalability and real-time access. Though, these systems also come with serious compliance issues connected with security, privacy, and regulations including the HIPAA and GDPR. Conventional models of access control such as Role-Based Access Control (RBAC) are inadequate in dynamic health care settings and would demand more sophisticated methods that are context-sensitive. The current paper provides the potential solution to one of the approaches aimed at facilitating the abstract access control and maintenance of privacy in e-healthcare buildings whose control is enhanced by cloud technologies. The architecture is a synthesis of Attribute-Based Access Control (ABAC), Ciphertext-Policy Attribute-Based Encryption (CP ABE) with outsourcing decryption, Proxy Re-Encryption (PRE) to provide efficient revocation and Differential Privacy (DP) to achieve secure analytics. Besides, tamper-evident Merkle-tree logs provide integrity and responsibility of the data access. The given system is more secure as it encrypts sensitive health information, however, fine-grained access control and revocation in a scalable manner are enabled and privacy-sensitive analytics. Analysis of the framework reveals that it has capability of greatly reducing latency, computational cost as well as compliance requirements hence is a viable solution in real life e- healthcare setting.