Design And Implementation Of Electronic Health Record (EHR) System Secure Access

Electronic Health Record(EHR)is the digitalized historical record created in social activities related to human health.Fast development and wide use of cloud computing technology had provided the cheap and highly efficient infrastructure to storage and computing of EHR,which contributed to lower hardware and software cost for the management of EHR.Data storage based on third-party had also improved the usability of the whole EHR system,in which the better EHR management efficiency led to faster development of EHR.EHR system under cloud environment has become a mainstream technological point and also one of the indispensable parts in clinical practice.Not only the medical standard as a whole could be facilitated,a faster and more scientific management process of hospitals could also be achieved.Meanwhile,the cloud computing environment could bring several potential security problems to EHR,which would harm data confidentiality and user privacy.In this article,Role Access Control Technology and Cryptography would be combined to present a Property Base Encryption Role Based Access Control Model under cloud environment.The model complies with the fundamental definition of Role Based Access Control in NIST RBAC Standard,which includes the many-to-many mapping as user to role and role to permission,as well as assignment and revocation within them.Property Base Encryption technology help to realize the model,which could prevent the illegal authorization and access due to strategic exposure in traditional Role Based Access Control System.Combined with EHR system,the model provides the withdrawal between user,role and permission,and the right separation function of reading and writing.It also provides a more flexible access control to EHR system,therefore could protect privacy of personal user data in EHR.At the same time,the encrypted data saved by user on cloud end could further ensure the confidentiality of EHR system.