The development of Electronic Information Technology has made the Electronic Medical Record a commonly used approach to recording and categorizing medical patient data in databases of different hospitals and medical entities so that controlling the shared data is not possible for patients at all. The importance of medical data as possessions of people and the system leads us to be concerned about its security, privacy, and accessibility. How to store and controlling access to medical information is of the most important challenges in the electronic health area. The present paper provides a new, secure, and efficient scheme based on blockchain technology and attribute-based encryption entitled “MedSBA” to record and store medical data, indicating that our proposed scheme protects user privacy and allows fine-grain access control of medical patient data based on General Data Protection Regulation (GDPR). Private blockchains are used in MedSBA to improve the right to revoke instant access which is of the attribute-based encryption challenges. The security and functionality of our proposed scheme are proved within a formal model and based on BAN logic, respectively; simulating the MedSBA scheme in the OPNET software as well as examining its computational complexity and storage indicates the efficiency of the present scheme.

MedSBA: a novel and secure scheme to share medical data based on blockchain technology and attribute-based encryption

The concept of smart metering allows real-time measurement of power demand which in turn is expected to result in more efficient energy use and better load balancing. However, finely granular measurements reported by smart meters can lead to starkly increased exposure of sensitive information, including various personal attributes and activities. Even though several security solutions have been proposed in recent years to address this issue, most of the existing solutions are based on public-key cryptographic primitives, such as homomorphic encryption and elliptic curve digital signature algorithms which are ill-suited for the resource constrained smart meters. On the other hand, to address the computational inefficiency issue, some masking-based solutions have been proposed. However, these schemes cannot ensure some of the imperative security properties, such as consumer’s privacy and sender authentication. In this paper, we first propose a lightweight and privacy-friendly masking-based spatial data aggregation scheme for secure forecasting of power demand in smart grids. Our scheme only uses lightweight cryptographic primitives, such as hash functions and exclusive-OR operations. Subsequently, we propose a secure billing solution for smart grids. As compared with existing solutions, our scheme is simple and can ensure better privacy protection and computational efficiency, which are essential for smart grids.

/pdf/lightweight-and-privacy-friendly-spatial-data-aggregation-1ce2lvb9n3.pdf

Lightweight and Privacy-Friendly Spatial Data Aggregation for Secure Power Supply and Demand Management in Smart Grids

As smart cities and nations are fast becoming a reality, so does the underpinning infrastructure, such as smart grids. One particular challenge associated with smart grid implementation is the need to ensure privacy preserving multisubset data aggregation. Existing approaches generally require the collaboration of a trusted third party (TTP), which may not be practical. This also increases the threat exposure, as the attacker can now target the TTP who may be servicing several smart grid operators. Therefore, in this article, a fault-tolerant multisubset data aggregation scheme is proposed. Our scheme aggregates the total electricity consumption value, and obtains the number of users and the total electricity consumption in different numerical intervals, without relying on any TTP. Detailed system analysis shows that our scheme prevents the leakage of single data, as well as guarantees the efficiency when new user joins and existing user leaves. Findings from our evaluation also demonstrate that system robustness is achieved with negligible cost.

/pdf/fault-tolerant-multisubset-aggregation-scheme-for-smart-grid-vrnx3io9zf.pdf

Fault-Tolerant Multisubset Aggregation Scheme for Smart Grid

In vehicular ad-hoc networks (VANETs), the correctness of a message requires authentication of the origin vehicle.
In this paper, we introduce a novel authentication scheme for VANETs which suggests a new solution for secure vehicle communications. The proposed scheme is an road side unit (RSU) based scheme in which the master key of the Trusted Authority (TA) is embedded in a tamper-proof device provided at the RSUs. Compared with the schemes that store the master key in the on-board units, our scheme is more practical because of a secure and high speed communication link between TA and RSUs. To the best of our knowledge,
this solution has not yet been devised for secure authentication in VANETs and the same objective has been fulfilled in this paper. Moreover, we introduce a formal proof to prove the security of the proposed scheme. Finally, we present a simulation and comparison indicating the performance and efficiency of our scheme.

NERA: A new and efficient RSU based authentication scheme for VANETs

https://research.tees.ac.uk/ws/files/9947510/tex.pdf

Erfaneh Vahedi

Papers

A secure ECC-based privacy preserving data aggregation scheme for smart grids