Authors:
Christian Maulany
1
;
Majid Nateghizad
1
;
Bart Mennink
2
and
Zekeriya Erkin
1
Affiliations:
1
Cyber Security Group, Department of Intelligent Systems, Delft University of Technology and The Netherlands
;
2
Digital Security Group, Radboud University, Nijmegen and The Netherlands
Keyword(s):
Medical Data, Privacy, Secret Sharing, Polymorphic Encryption and Pseudonomysation.
Related
Ontology
Subjects/Areas/Topics:
Applied Cryptography
;
Cryptographic Techniques and Key Management
;
Data Engineering
;
Databases and Data Security
;
Information and Systems Security
;
Privacy Enhancing Technologies
Abstract:
The availability of wearable devices such as smartwatches and fitness trackers are a recent development. Among other things, these devices can measure the activity and vital signs of their wearers. As the types of data these devices are able to gather increases the potential for them to be used as a source of data grows. This calls for a secure method of controlling the digital exchange of medical data between wearables and healthcare providers, and healthcare providers in general. By enforcing the exchange of data to go through a central authority, a patient can be given more control over who is able to access his medical data. This central authority is then given the task of monitoring access and ensuring that all access requirements are met. Though effective, this solution relies on a highly trusted central authority. In this work, we propose a scheme using Polymorphic Encryption and Pseudonomysation and Secret Sharing to provide anonymous data storage and data exchange. Our propo
sal removes the need for a central authority, and instead uses a group of authorities, of which a quorum is needed to facilitate the exchange of data.
(More)