Main Article Content
Abstract
Electronic Health Record systems (EHR) is an emerging patient-centric model of health information exchange, which is often outsourced to be stored at a third party, such as cloud providers. Electronic Health Record systems (EHR) are increasingly being deployed within healthcare institutions to reduce the problems and limitations of the paper-based approach but its deployment has been slow due to high investment and maintenance cost. Cloud Computing has been widely recognized as the next generation’s computing infrastructure and it offers several advantages to its users. In this study, an Enterprise Electronic Cloud-Based Health Record System was designed, implemented and tested for recording, retrieving, archiving and updating of patients and other medical records. The Cloud database acts as the unified data bank for all the collaborating hospitals, the middleware provides a common platform for all the EHR systems between remote hospitals while an authentication server grants access to authorized users and denies unauthorized users access to records or resources on the system. An e-web portal serves as the front end of the system and it links the application with the cloud. We Proposed Block Authentication Code Mechanism (BAC) techniques to encrypt each patient’s EHR file. Different from previous works in secure data outsourcing, we focus on the multiple data owner scenario, and divide the users in the PHR system into multiple security domains that greatly reduces the key management complexity for owners and users. A high degree of patient privacy is guaranteed simultaneously by exploiting multi-authority EHR. Our scheme also enables dynamic modification of access policies or file attributes, supports efficient on-demand user/attribute revocation and break-glass access under emergency scenarios. Extensive analytical and experimental results are presented which show the security, scalability and efficiency of our proposed scheme