Securing Personal Health Records in the Cloud by Enforcing Sticky Policies

Chunxia Leng (East China University of Science and Technology)
Huiqun Yu (East China University of Science and Technology)
Jingming Wang (Chuzhou University)
Jianhua Huang (East China University of Science and Technology)

Indonesian Journal of Electrical Engineering and Computer Science
Vol 11, No 4: April 2013

The personal health records (PHR) always contain much health-related privacy information in different categories. When storing the PHR data in the cloud, the PHR owner loses control to the sensitive information and is confronted with potential privacy exposure. In this paper, we propose a scheme to enable the protection of the PHR data hosted in the cloud. It not only supports that the data access can be fine-grained and base on the privacy policies specified by the PHR owner, but also affords an effective encryption mechanism and flexible key management approach to enforce the privacy policies sticky to the PHR data. DOI: http://dx.doi.org/10.11591/telkomnika.v11i4.2406