A Multi-Authorization Blockchain Based Access Control for Cloud Healthcare System

The Internet of Drones (IoD) is an emerging domain due to its capability of being deployed in several domains. The drones in IoD are capable of exploring the platform and transfer commodities with embedded sensors. However, the data accumulated by drone sensors face privacy and security issues due to advanced technologies. This paper devises a blockchain-based access control scheme for initiating secure communication among the drones in IoD. The system has four different entities that involve the Drone, server, user, and control room. The proposed Blockchain-based access control scheme involves two phases: the authentication and access control phases. The authentication phase is performed considering sender drone credentials, and the access control phase is done using four methods. In the access control phase, four kinds of access control mechanisms are considered: Drone to drone access control, Drone to server access control, Emergency access control if drone failure and Control set up with blockchain technology. Both the communicating entities can establish the secret key for secure communication at the end of access control. The proposed Blockchain-based access control scheme provided superior performance concerning classical methods with a minimal end-to-end delay of 0.870sec, a minimal packet loss rate of 2%, and maximal throughput of 70.493bps.

In the era of big data with large information sharing and fast data flow, traditional access control technology oriented to closed environment cannot be directly applied to the distributed and dynamic environment of big data. With the characteristics of decentralization, blockchain can solve the trust problem in traditional access control technology. From the application scenarios of the Internet of Things and e-Health, this paper analyzes and summarizes the existing research progress from two implementations: transaction-based access control and smart contract-based access control. Facing the current challenges of blockchain-based access control mechanism, the future research direction is proposed afterwards.

To develop access control mechanisms, particularly in terms of maintaining effective and secure access control within Internet of Things (IoT) networks. Whereas the sufficient use must be made of blockchain-based access control technology. This is because of the sheer volume of connected devices and the subsequent increase in transactions. This can negatively impact the performance and responsiveness of the networks. Thus, this article proposes a comprehensive approach that evaluates the requester’s reputation with respect to regulating access requests for IoT resources. The proposed approach combines fuzzy reputation with a decay algorithm. It then calculates the quantitative reputation value for each IoT user. This considers multiple variables, such as the Access Request Rate, frequency of requests, etc. This new reputation value serves as the basis for access-control decisions. Extensive simulations and experiments are conducted to evaluate the effectiveness of the proposed framework. For the simulation, we used a single-board Raspberry Pi. We also used a hybrid blockchain network environment comprising Geth and Hyperledger Fabric. We then analyzed and compared the performance of the proposed framework with that of the existing approaches. The results demonstrated that compared to the mathematical mechanism, the framework provides improved access control in IoT networks. The fuzzy-based reputation framework captures the dynamic nature of IoT environments, and effectively identifies trustworthy and malicious devices, whereas the decay algorithm reflects the most recent user behavior.

With the development of 5G and the Internet of things (IoT), the multi-domain access of massive devices brings serious data security and privacy issues. At the same time, most access systems lack the ability to identify network attacks and cannot adopt dynamic and timely defenses against various security threats. To this end, we propose a blockchain-based access control and behavior regulation system for IoT. Relying on the attribute-based access control model, this system deploys smart contracts on the blockchain to achieve distributed and fine-grained access control and ensures that the identity and authority of access users can be trusted. At the same time, an inter-domain communication mechanism is designed based on the locator/identifier separation protocol and ensures the traffic of access users are authorized. A feedback module that combines traffic detection and credit evaluation is proposed, ensuring real-time detection and fast, proactive responses against malicious behavior. Ultimately, all modules are linked together through workflows to form an integrated security model. Experiments and analysis show that the system can effectively provide comprehensive security protection in IoT scenarios.

Towards accountable and privacy-preserving blockchain-based access control for data sharing

Healthcare systems are increasingly vulnerable to security threats due to their reliance on digital platforms. Traditional access control models like Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) have limitations in mitigating evolving risks in these systems. Despite their unique features, these models face limitations in mitigating evolving risks in healthcare systems. Traditional models are primarily oriented towards allocating permissions according to predetermined roles or policies, which results in challenges in effectively adapting to the dynamic complexities of modern healthcare ecosystems. Therefore, this paper proposes a novel risk-aware RBAC and ABAC access control model to enhance the flexibility, adaptability and security issues associated with healthcare systems. The proposed model integrates RBAC for role-based categorization, ABAC for fine-grained control based on user attributes and environmental factors, and Risk-Based Access Control (RiBAC) for dynamic risk assessment. The proposed model dynamically adjusts access permissions based on risk values, ensuring accurate and adaptable access control decisions. The experimental results demonstrate the feasibility and effectiveness of the proposed model in granting access to authorized users while denying access to unauthorized users. Through a series of 43 experiments that simulate various scenarios of access control operations in the healthcare system, the proposed model demonstrates significant improvement in the accuracy, precision, and recall of access control decisions compared to traditional models. The proposed model’s ability to dynamically assess risk and adjust access permissions based on contextual factors significantly enhances its ability to mitigate threats and protect sensitive medical data.

Internet of thing based healthcare (IoThc) system is a platform which is an integration of smarter device, intelligent processor and informative communication. It also requires a huge enhancement to compete with the current scenario and medication facilities. IoT has a huge architecture that clarifies the related field. Still, some lack of knowledge is opposing the principal investigators to gain more information about it. The proliferation of IoT and its healthcare applications is increasing continuously. These applications like automation systems, E-Health monitoring, etc. are using heterogeneous sensors in their environment. It results in a large variety of health care data, sensing resources, and protocols which need to be managed in which will be beneficial for the treatment of patients. It also requires resource provisioning and management through the healthcare cloud. Key features of the healthcare cloud like on-demand access, resource provisioning, elasticity, etc. can be integrated with IoT domains. In this paper, IoT-based healthcare cloud with device approach is taken into consideration. It focuses on the resource management challenges by applying the cloud concept in the IoT environment. Resources are assigned to the healthcare device cloud on-demand basis. Physical devices of IoT are shared and provisioned like in the cloud environment where resources are available to serve the request using infrastructure as a service (IaaS).KeywordsInternet of ThingsHealthcareAutomation systemE-healthCloud computingResource managementIaaS

Access control system is an important component to protect patients’ information from abuse in a health care system. It is a major concern in the management, design, and development of healthcare systems. Designing access control policies for healthcare systems is complicated due to the dynamic and inherent complexity of the tasks performed by the healthcare personnel. Permissions in access control systems are usually granted on the basis of static policies. However, static policies are not enough to cope with various situations such as emergencies. Most often, the Break-the-glass mechanism is used to bypass static policies to handle emergency situations. Since healthcare systems are critical systems, where errors can be very costly in terms of lives, quality of life, and/or dollars, it is crucial to identify discrepancies between policy specifications and their intended function to implement correctly a flexible access control system. Formal verifications are necessary for exhaustive verification and validation of policy specifications to ensure that the policy specifications truly encapsulate the desires of the policy authors. We present a verifiable framework to enact a dynamic access control model by integrating the ANSI/INCTIS RBAC Reference Model in a workflow and an approach for property verifications of the access control model. Access control policies are expressed by the formal semantics of a model checker and properties are verified by the DiVinE model checker.

Modern healthcare systems have turned to cloud computing as a cornerstone that provides scalability, agility, cost-efficiency and opportunities to support telemedicine, large scale data analytics and patient centric services. Yet, the safe use of healthcare clouds requires a fine balance between three tendencies, which seem to conflict with each other, including regulation protection (e.g., HIPAA, GDPR), protection of data privacy of electronic protected health information (ePHI), and high performance and availability of the system needed by clinical activities. In this paper, the researcher explores the manner through which healthcare organisations can design and deploy cloud operations to meet all the three dimensions concurrently. We discuss major security, privacy, and performance issues in cloud based healthcare setting based on recent empirical and industry findings [1], [2]. We next suggest a framework with compliance automation, privacy by design implementation, and performance conscious cloud configuration and monitoring. We discuss certain tradeoffs that can be made, like the overheads of encryption versus latency, the depth of auditing/logging versus throughput, multitenant resource isolation versus cost/performance efficiency. The knowledge gained in case studies reveals to change agents how their healthcare facilities can employ adaptive policy engines, data classification levels, and control levels, auto-scaling resources, and real time monitoring in order to ensure compliance, privacy protection, and service level assurance. Lastly, there are implications to governance, vendor management and continuous assurance in healthcare clouds which we discuss. The results indicate that there is no single silver bullet; instead success is based on an integrated model of functioning, cross functional teamwork, and constant balancing between controls and performance. We conclude and make our own recommendations on best practice by healthcare system operators wishing to implement icyes operations in a high performance regulated environment

PurposeThe purpose of this paper Computing is a recent emerging cloud model that affords clients limitless facilities, lowers the rate of customer storing and computation and progresses the ease of use, leading to a surge in the number of enterprises and individuals storing data in the cloud. Cloud services are used by various organizations (education, medical and commercial) to store their data. In the health-care industry, for example, patient medical data is outsourced to a cloud server. Instead of relying onmedical service providers, clients can access theirmedical data over the cloud.Design/methodology/approachThis section explains the proposed cloud-based health-care system for secure data storage and access control called hash-based ciphertext policy attribute-based encryption with signature (hCP-ABES). It provides access control with finer granularity, security, authentication and user confidentiality of medical data. It enhances ciphertext-policy attribute-based encryption (CP-ABE) with hashing, encryption and signature. The proposed architecture includes protection mechanisms to guarantee that health-care and medical information can be securely exchanged between health systems via the cloud. Figure 2 depicts the proposed work's architectural design.FindingsFor health-care-related applications, safe contact with common documents hosted on a cloud server is becoming increasingly important. However, there are numerous constraints to designing an effective and safe data access method, including cloud server performance, a high number of data users and various security requirements. This work adds hashing and signature to the classic CP-ABE technique. It protects the confidentiality of health-care data while also allowing for fine-grained access control. According to an analysis of security needs, this work fulfills the privacy and integrity of health information using federated learning.Originality/valueThe Internet of Things (IoT) technology and smart diagnostic implants have enhanced health-care systems by allowing for remote access and screening of patients’ health issues at any time and from any location. Medical IoT devices monitor patients’ health status and combine this information into medical records, which are then transferred to the cloud and viewed by health providers for decision-making. However, when it comes to information transfer, the security and secrecy of electronic health records become a major concern. This work offers effective data storage and access control for a smart healthcare system to protect confidentiality. CP-ABE ensures data confidentiality and also allows control on data access at a finer level. Furthermore, it allows owners to set up a dynamic patients health data sharing policy under the cloud layer. hCP-ABES proposed fine-grained data access, security, authentication and user privacy of medical data. This paper enhances CP-ABE with hashing, encryption and signature. The proposed method has been evaluated, and the results signify that the proposed hCP-ABES is feasible compared to other access control schemes using federated learning.

With the advancement of technology and economy, the scale of the smart home industry has exploded. While improving people’s lives, smart home systems are facing threats to privacy leaks, malicious attacks, and structural security. Effective security mechanisms are very important for protecting valuable data in smart home systems. Access control helps information systems prevent malicious access, thereby reducing the risk of privacy leakage. Blockchain can provide security support for the Internet of Things system due to its advantages of decentralization and immutability. Therefore, in this paper, a smart home access control scheme based on blockchain is proposed. The scheme uses Hyperledger Fabric and implements access control strategies through smart contracts. By designing a hybrid access control model based on dynamic attribute-based access control and static access control matrix, the remote access control initiated by the user through the Internet and the access control between local devices are well guaranteed at the same time. Through safety analysis and performance evaluation, the feasibility of the proposed scheme is demonstrated.

Advancement of information and communication technology (ICT) has facilitated electronic communication among its users having dispersed geographical location. This concept of electronic communication may be implemented in multivariate service sectors to cater services to end user, i.e., Citizen. India being a developing nation have to afford huge establishments and manpower to deliver services regularly to its Citizen. Due to this situation, enormous amount of recurring expenditure is mounted over the financial structure of nation. Moreover, the services delivered through conventional mode takes sufficient time to reach the intended user, particularly, in case of distantly located user. To solve these issues, electronic mode of message communication may be adopted to provide electronic services in timely and budget-friendly manner. The only concern of this approach is security of sensitive information which is transmitted through public communication channel, i.e., Internet. To resolve this issue, hybrid cryptographic security protocols should be used to ensure privacy, integrity, non-repudiation and authentication (PINA) during its implementation in real-world scenario. Furthermore, to provide an user friendly system, a Citizen-centric single window interface have been modeled. As the primary objective of this paper, authors will extend it further to deliver cloud healthcare facilities to Citizen through the proposed single window interface, i.e., multipurpose electronic card (MEC). To simulate the real-world implementation, in this paper, authors have performed object-oriented modeling (OOM) of proposed cloud healthcare system.KeywordsCloud computingCloud healthcareObject-oriented modeling (OOM)

The related and often challenging topics of identity management and access control form an essential foundation for e-health infrastructure. Several approaches and supporting specifications for electronic healthcare record system (EHR-S) communication have been proposed by research projects and standards development organizations in recent years. For instance, part four of the CEN TC251 EN13606 EHRcom standard and the HL7 Role Based Access Control Draft Standard for Trial Use have helped to specify the nature of access control behaviour in relation to EHR communication within and between healthcare organisations. Access control services are a core component not only of the integrated care EHR-S but also for other information systems in the e-health domain. To underpin functionality of this type in a distributed environment, it is necessary to provide access to scalable, secure and uniform ID domains for users and patients.This paper considers the use of part four of the EHRcom standard in the context of the availability (or lack thereof) of national identification systems for patients and for users of an integrated care EHR-S. This work begins with a brief summary of the state-of-the-art in identity management and access control in the health domain and a description of approaches that could lead to a secure and interoperable identification mechanism. To address the identification problem, the authors describe well known EHR access control viewpoints that are compatible with the CEN standard for EHR communication, EN13606 and describe how an identification service can support this functionality.KeywordsElectronic Healthcare record systemIdentity managementID domainEHRcom standardAccess control

There are several security problems arising from the characteristics of IoT, and one of them is weak access control. Traditional access control models require one centralized authority that stores all the information for access control and validates access rights. This single point of failure in IoT access control could lead to situations where a single breach can cause sensitive information leakage across the entire system. Various studies have been conducted to mitigate this security risk by introducing a decentralized architecture based on blockchain technology called BBAC. However, most BBAC models consider only a simple access control situation, which can lead to a “the Greatest privilege problem”. This study proposes a novel access control model that enforces minimum privilege to an access token by the division and modification of access rights. As a result, we contributed to enhancing the practicality of the BBAC and mitigating risks that may arise in the delegation process.

With rapid advancements in the technology, almost all the devices around are becoming smart and contribute to the Internet of Things (IoT) network. When a new IoT device is added to the network, it is important to verify the authenticity of the device before allowing it to communicate with the network. Hence, access control is a crucial security mechanism that allows only the authenticated node to become the part of the network. An access control mechanism also supports confidentiality, by establishing a session key that accomplishes secure communications in open public channels. Recently, blockchain has been implemented in access control protocols to provide a better security mechanism. The foundation of this survey article is laid on IoT, where a detailed description on IoT, its architecture and applications is provided. Further, various security challenges and issues, security attacks possible in IoT and their countermeasures are also provided. We emphasize on the blockchain technology and its evolution in IoT. A detailed description on existing consensus mechanisms and how blockchain can be used to overpower IoT vulnerabilities is highlighted. Moreover, we provide a comprehensive description on access control protocols. The protocols are classified into certificate-based, certificate-less and blockchain-based access control mechanisms for better understanding. We then elaborate on each use case like smart home, smart grid, health care and smart agriculture while describing access control mechanisms. The detailed description not only explains the implementation of the access mechanism, but also gives a wider vision on IoT applications. Next, a rigorous comparative analysis is performed to showcase the efficiency of all protocols in terms of computation and communication costs. Finally, we discuss open research issues and challenges in a blockchain-envisioned IoT network.