Ciphertext-Policy Attribute-Based Signcryption

With Verifiable Outsourced Designcryption for

Sharing Personal Health Records

Under the Guidance of Submitted By

Ms. Vennila Santhanam , M.C.A., M.E(CSE) Chandhini S
IIM.Sc.(Computer Science)

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 1

 ABSTRACT

• Personal health record (PHR) is a patient-centric model

of health information exchange , which greatly facilitates
the storage, access, and share of personal health
information.
•The PHR service providers would like to store the PHR
applications and health information data in the cloud.
•Ciphertext -policy attribute-based signcryption is a
promising solution to design a cloud- assisted PHR secure
sharing system.
• It provides grained access control, authenticity, and
sender privacy of PHR data.
CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 2
INTRODUCTION

•The rapid development of cloud computing, a large

number of companies and individuals utilize the public cloud
to store and share data.
•An unauthorized user may access or modify the PHR data
stored in the cloud server.
•In this paper present a new Ciphertext-Policy
Attribute-Based Signcryption with Outsourced Designcryption
(CP-ABSC) scheme in the cloud-based PHR system.

CP-OABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 3

EXISTING SYSTEM

• The PHR service are outsourced to the cloud server

to enjoy the benefits of cloud computing.
•The user can access their PHR data from the cloud
rather than from the PHR service provider.
• The ABE algorithm is used.
•It brings a series of questions about security and
privacy of the sensitive personal health information
of the patients.

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 4

 DISADVANTAGE OF EXISTING SYSTEM

•An unauthorised user may access or modify the

PHR data stored in the cloud server.
•There is a computational overhead in the
designcryption process.
•The major computation in the untrusted cloud
server.

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 5

 PROPOSED SYSTEM

•Ciphertext- policy Attribute-Based signcryption with

Outsourced Designcryption(CP-ABSC) scheme in the cloud-
based PHR system.
• It provided grained access control, authenticity, security.
•To eliminate the computational overhead of the
designcryption process at PHR user side, the attributed-
based signcryption scheme and presented an efficient and
secure.

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 6

ADVANTAGE OF PROPOSED SYSTEM

•An authorized user can access or modify

the PHR data stored in the cloud server.
•It's more secure.

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 7

 SYSTEM SPECIFICATION

HARDWARE REUIREMENTS

Hard disk : 500 GB

RAM : 6GB
Keyboard : 110 Keys enhanced
Mouse : Logitech
System : Intel Core I3.

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 8

 SOFTWARE REQUIREMENTS

Operating System : Windows 7

Front End : .NET 2013
Coding Language : C#
Data Base : MYSQL 5.0.

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 9

 MODULES
PHR Owner registration
PHR User
Trusted Attribute Authority (TAA) distribute the
key to owner and user
Cloud Service Provider (CSP) save and send the
data .

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 10

PHR Owner registration
The PHR Owner registers on TAA, TAA runs the algorithm
Setup() to generate a Public Key PK . PK is sent to PHR owner. PHR
owner uploads data after encryption in the cloud .

PHR User
PHR user logins onto the system and sends, an authorization
request to TAA. The authorization request includes Attribute Keys
(AK) which PHR user already has. TAA accepts the authorization
request and checks the request and a generate Attribute Keys for PHR
user .

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 11

 Cloud Service Provider Save and Send the Data

PHR user sends a request for data to the cloud.

Cloud receives the request and checks if the PHR user
meets the access requirement. If PHR user can’t meet the
requirement, it refuses the request, otherwise it sends the
Ciphertext to PHR user .

Trusted Attribute Authority (TAA) distribute

the key to user and owner
A Trusted Attribute Authority (TAA) is introduced.
It is responsible of generating public and private keys, and
distributing Attribute keys to users.

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 12

DATAFLOW DIAGRAM
New user Details
Registration

New
PHR owner
User ,logindb

Login
User details

Valid user
Admin and user login
CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 13
 Username, Username ,
password password
PHR owner Request for key TAA

Upload in
cloud Setup()
Send to alg
Encrypted
data key
Encrypt Generate the
PHR owner
data key

PHR Owner Encrypt the Files

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 14

 Request to access data from sp
Logged details

User Validate user File DB

Valid
Decrypted user
file
Fetch data from
cloud

file

decrypted CTS
Key ,
file
PHR user decrypt the file

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 15

 Screen Shots

Home Page

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 16

 Data Owner Registration

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 17

 Trusted Authority login page

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 18

 PHR User Registration
CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 19
 Upload data
CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 20
 Cloud Login
CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 21
 Search PHR Data in Cloud

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 22

 Decryption Result Send to User

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 23

 CONCLUSION
To eliminate the computational overhead of
the designcryption process at PHR user side, the
attributed-based signcryption scheme and presented
an efficient and secure CP-ABSC with verifiable
outsourced designcryption scheme . With the help of
cloud servers, the scheme only needs small modular
exponentiation operation to PHR user. Thus, the user
saves both bandwidth and local computation time
significantly. It greatly improves the efficiency of
PHR system.

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 24

 THANKS!

CP-ABSC FOR SHARING PERSONAL HEALTH RECORDS 30517P15002 25