A systematic and comprehensive review of security and privacy-preserving challenges in e-health solutions indicates various privacy preserving approaches to ensure privacy and security of electronic health records (EHRs) in the cloud. This paper highlights the research challenges and directions concerning cyber security to build a comprehensive security model for EHR. We carry an intensive study in the IEEE, Science Direct, Google Scholar, PubMed, and ACM for papers on EHR approach published between 2000 and 2018 and summarized them in terms of the architecture types as well as evaluation strategies. We surveyed, investigated, and reviewed various aspects of several articles and identified the following tasks: 1) EHR security and privacy; 2) security and privacy requirements of e-health data in the cloud; 3) EHR cloud architecture, and; 4) diverse EHR cryptographic and non-cryptographic approaches. We also discuss some crucial issues and the ample opportunities for advanced research related to security and privacy of EHRs. Since big data provide a great mine of information and knowledge in e-Health applications, serious privacy and security challenges that require immediate attention exist. Studies must focus on efficient comprehensive security mechanisms for EHR and also explore techniques to maintain the integrity and confidentiality of patients’ information.

/pdf/security-and-privacy-preserving-challenges-of-e-health-2jbey6qxdx.pdf

Security and Privacy-Preserving Challenges of e-Health Solutions in Cloud Computing

Blockchain-based decentralized storage networks: A survey

Cloud is a computing model that provides sharing and supports ubiquitous on-demand access computing, providing new data processing and services for many industries, significantly reducing user computing and storage costs, and improving ease of use. With the development of cloud-scale and intensification, cloud security has become an essential issue in the field of cloud computing. Access control is one of the critical security technologies for protecting sensitive data stored in the cloud by enterprises and individuals. Since the centralized access control mechanism is adopted in the cloud, the sensitive data in the cloud are easy to be tampered with or leaked by hackers or cloud internal managers. To address this issue, we propose a blockchain-based access control framework with privacy protection called AuthPrivacyChain. Firstly, we use the account address of the node in blockchain as the identity, and at the same time, redefine the access control permission of data for the cloud, which is encrypted and stored in blockchain. After that, we design processes of access control, authorization, and authorization revocation in AuthPrivacyChain. Finally, we implement AuthPrivacyChain based on enterprise operation system (EOS), and the results show that AuthPrivacyChain can not only prevent hackers and administrators from illegally accessing resources, but also protect authorized privacy.

/pdf/authprivacychain-a-blockchain-based-access-control-framework-dgu2nnvk5w.pdf

AuthPrivacyChain: A Blockchain-Based Access Control Framework with Privacy Protection in Cloud

Background: Blockchain technology has the potential to enable more secure, transparent, and equitable data management. In the health care domain, it has been applied most frequently to electronic health records. In addition to securely managing data, blockchain has significant advantages in distributing data access, control, and ownership to end users. Due to this attribute, among others, the use of blockchain to power personal health records (PHRs) is especially appealing.
Objective: This review aims to examine the current landscape, design choices, limitations, and future directions of blockchain-based PHRs.
Methods: Adopting the PRISMA (Preferred Reporting Items for Systematic Reviews and Meta-analyses) guidelines, a cross-disciplinary systematic review was performed in July 2020 on all eligible articles, including gray literature, from the following 8 databases: ACM, IEEE Xplore, MEDLINE, ScienceDirect, Scopus, SpringerLink, Web of Science, and Google Scholar. Three reviewers independently performed a full-text review and data abstraction using a standardized data collection form.
Results: A total of 58 articles met the inclusion criteria. In the review, we found that the blockchain PHR space has matured over the past 5 years, from purely conceptual ideas initially to an increasing trend of publications describing prototypes and even implementations. Although the eventual application of blockchain in PHRs is intended for the health care industry, the majority of the articles were found in engineering or computer science publications. Among the blockchain PHRs described, permissioned blockchains and off-chain storage were the most common design choices. Although 18 articles described a tethered blockchain PHR, all of them were at the conceptual stage.
Conclusions: This review revealed that although research interest in blockchain PHRs is increasing and that the space is maturing, this technology is still largely in the conceptual stage. Being the first systematic review on blockchain PHRs, this review should serve as a basis for future reviews to track the development of the space.
Trial Registration:

/pdf/blockchain-personal-health-records-systematic-review-3jdlzpzzq1.pdf

Blockchain Personal Health Records: Systematic Review.

A survey on access control mechanisms for cloud computing

Cloud computing is the use of computing resources like hardware and software that are delivered as a service over a network. It confides remote services with a user's data and software, it enables a user to do large amount of storage, large amount of computations. Due to which data security in cloud becomes a big issues. Data access control provides the security of data in the cloud. The large amount of data outsourced in cloud servers, the data access control becomes a challenging issue in cloud storage systems. We have many access control security solution like Attribute based, Role based, Hierarchical identity management, Identity based authentication, Trust based model etc. Cloud computing is one recent technologies. So it becomes very necessary to secure the data as well as privacy of users. Access Control methods provide an effective way to ensure that authorized user's access the data and the system. In this paper we discussed various features of attribute based Encryption, Role based, Hierarchical identity management, Identity based authentication, Trust based model suitable for cloud computing environment.

Survey on access control issues in cloud computing

Personal Health information is highly confidential. The Main objective is to find out the techniques to protect the health care data from unauthorized user in cloud. Due to privacy concern the personal data are need to be protected from third party and also from unauthorized user. In existing work they used cryptographic techniques like KP-ABE, Attribute based encryption, CP-ABE, etc. This paper addresses the challenges in each access control techniques, and its pros and cons. Future work is to overcome the challenges in existing techniques by using Keyless signature algorithm by using hash function.

A Review on Access Control Issues in EHealth Application in Cloud Computing

Electronic health information is an efficient technique for providing health care services to society. Patient health information is stored in the cloud, to allow access of eHealth information from anywhere, and at any time, but the technical problems are security, privacy, etc. Sharing the medical data in a trustless environment is overcome by the proposed framework SeFra. The proposed work provides a secure framework to manage the eHealth record by using blockchain (SeFra). For authentication purposes, a temporal shadow is used and the integrity of health records is ensured by blockchain technology.

/pdf/sefra-a-secure-framework-to-manage-ehealth-records-using-35zrnhgfg7.pdf

M Aramudhan

Papers

Survey on access control issues in cloud computing

A Review on Access Control Issues in EHealth Application in Cloud Computing

SeFra: A Secure Framework to Manage eHealth Records Using Blockchain Technology