计算机科学与探索 ›› 2022, Vol. 16 ›› Issue (2): 359-371.DOI: 10.3778/j.issn.1673-9418.2106023

• 网络与信息安全 • 上一篇    下一篇

重大疫情患者隐私数据保护方案研究

韩刚, 吕英泽+(), 罗维, 王嘉乾   

  1. 西安邮电大学 网络空间安全学院,西安 710000
  • 收稿日期:2021-06-07 修回日期:2021-08-30 出版日期:2022-02-01 发布日期:2021-09-01
  • 通讯作者: + E-mail: lvyingze0809@163.com
  • 作者简介:韩刚(1990—),男,陕西宝鸡人,博士,讲师,CCF会员,主要研究方向为公钥密码学、属性基加密。
    吕英泽(2000—),男,河南三门峡人,CCF学生会员,主要研究方向为区块链技术、属性基加密。
    罗维(1987—),男,陕西宝鸡人,博士,讲师,CCF会员,主要研究方向为公钥密码学、云存储数据安全。
    王嘉乾(1999—),男,山西临汾人,CCF学生会员,主要研究方向为区块链技术、云计算。
  • 基金资助:
    国家自然科学基金(62102312);陕西省自然科学基础研究计划(2021JQ-722);陕西省高校科协青年人才托举计划(20210119);陕西省教育厅科研计划项目(20JK0906)

Privacy Data Protection Scheme for Patients with Major Outbreaks

HAN Gang, LYU Yingze+(), LUO Wei, WANG Jiaqian   

  1. School of Cyberspace Security, Xi’an University of Posts and Telecommunications, Xi’an 710000, China
  • Received:2021-06-07 Revised:2021-08-30 Online:2022-02-01 Published:2021-09-01
  • About author:HAN Gang, born in 1990, Ph.D., lecturer, member of CCF. His research interests include public key cryptography and attribute-based encryption.
    LYU Yingze, born in 2000, student member of CCF. His research interests include blockchain technology and property-based encryption.
    LUO Wei, born in 1987, Ph.D., lecturer, member of CCF. His research interests include public key cryptography and cloud storage data security.
    WANG Jiaqian, born in 1999, student member of CCF. His research interests include blockchain technology and cloud computing.
  • Supported by:
    National Natural Science Foundation of China(62102312);Natural Science Basic Research Program of Shaanxi Province(2021JQ-722);Young Talent Fund of University Association for Science and Technology in Shaanxi Province(20210119);Scientific Research Program of Shaanxi Provincial Education Department(20JK0906)

摘要:

2020年,新冠肺炎在全球爆发,全球医疗系统受到巨大考验,新冠肺炎患者隐私数据安全是医疗信息系统中极其重要的一环。疫情期间,中国新冠肺炎患者隐私数据泄露的案例层出不穷,给患者带来巨大的困扰。采用委托拜占庭容错机制(dBFT)提出了结合区块链的重大疫情患者隐私数据保护方案。方案以联盟链为基础,将政府机构、医疗机构和民众等不同角色分布在主侧双链模型中,采用侧链技术在主、侧链之间进行信息交互,对患者数据进行安全共享;提出了链上分级数据加密方案(HDES),采用分级加密技术对链上的患者隐私数据进行细粒度保护。最后,对主侧双链模型的请求数据吞吐量和HDES方案的加解密效率进行了实验分析,并与现有的区块链电子医疗病例方案进行比较。通过比较可得该方案具有一定的高效性、较强的安全性和较高的针对性。

关键词: 区块链, 委托拜占庭容错机制(dBFT), 分级加密, 隐私保护, 安全共享

Abstract:

In 2020, the global outbreak of COVID-19 made the global healthcare system face huge test, and the security of COVID-19 patients privacy data is an extremely important part of the healthcare information system. During the outbreak, there were numerous cases of privacy data leakage of Chinese patients with COVID-19, which caused great distress to patients. This paper proposes a patient privacy data protection scheme combined with blockchain for major epidemics using delegated Byzantine fault tolerant (dBFT) mechanism. The scheme is based on a federated chain, distributing different players such as government agencies, medical institutions and the public in a dual-chain model of main and side chains, and using side chain technology to interact with information between the main and side chains for secure sharing of patient data. It proposes the on-chain hierarchical data encryption scheme (HDES), which protects the patient privacy data on the chain at a fine-grained level using hierarchical encryption technology. Finally, the requested data throughput of the main-side dual-chain model and the encryption and decryption efficiency of the HDES scheme are experimentally analyzed and compared with the existing blockchain electronic medical case scheme. The comparison results show that this scheme has certain efficiency, strong security and high relevance.

Key words: blockchain, delegated Byzantine fault tolerant (dBFT) mechanism, hierarchical encryption, privacy protection, secure sharing

中图分类号: