The document proposes a privacy-preserving mobile healthcare system using a private cloud. It aims to address privacy issues with electronic healthcare by building privacy into the system. The key features include efficient key management, privacy-preserving data storage and retrieval (especially for emergencies), and auditability to prevent misuse of health data. The system utilizes techniques like searchable symmetric encryption, identity-based encryption and attribute-based encryption for security. It follows a cloud-assisted service model with the private cloud storing and processing data to support lightweight tasks on mobile devices.

1. Presented by:
M.Soniya
A.Dhivya
S.Vinitha

2. Abstract
Motivated by the privacy issues, curbing the adoption of
electronic healthcare systems and the wild success of cloud
service models,
Propose to build privacy into mobile healthcare systems
with the help of the private cloud.
Our system offers salient features including efficient key
management, privacy-preserving data storage, and
retrieval, especially for retrieval at emergencies, and audit
ability for misusing health data.

3. Abstract(cont..)
Propose to integrate key management from
pseudorandom number generator for unlink ability, a
secure indexing method for privacy preserving keyword
search which hides both search and access patterns based
on redundancy
Integrate the concept of attribute based encryption
with threshold signing for providing role-based access
control.
Audit ability to prevent potential misbehavior, in both
normal and emergency cases.

4. Existing system
 Existing system a PHR system model, there are multiple
owners who may encrypt according to their own ways,
possibly using different sets of cryptographic keys.
 Each user obtains keys from every owner whose PHR she
wants to read would limit the accessibility .
 An alternative is to employ a central authority (CA) to do
the key management on behalf of all PHR owners, but this
requires too much trust on a single authority.

5. Disadvantage
 A third-party server inside hackers can able to leak the
patient’s information and security records to other peoples
so this scheme is not fully trust.
 The storage privacy in the existing system is a weaker
form of a privacy because it does not hide search and
access pattern.

6. Literature survey
Privacy-preserving query over encrypted graph-structured
data in cloud computing
The consideration of users’privacy, sensitive data have to
be encrypted before outsourcing, which makes effective data
utilization a very challenging task.
Patient Controlled encryption: Ensuring privacy of
electronic medical records
Security in such systems should be enforced via encryption
as well as access control. This show that we can build efficient
system that allows patients both to share partial access rights
with others, and to perform searches over their records

7. Literature Survey(Cont..)
Scalable and secure sharing of personal health records in
cloud computing using attribute –based encryption
To achieve fine-grained and scalable data access control
for PHRs, we leverage attribute based encryption (ABE)
techniques to encrypt each patient’s PHR file

8. Proposed system
 The private cloud which can be considered as a service
offered to mobile users. The proposed solutions are
built on the service model.
 Mobile users outsource data processing tasks to the
private cloud which stores the processed results on the
public cloud.

9. Proposed System(cont..)
 The cloud-assisted service model supports the
implementation of practical privacy mechanisms since
intensive computation and storage can be shifted to the
cloud, leaving mobile users with lightweight tasks.

10. Architecture diagram

11. Modules
Implementation modules:
Searchable Symmetric Encryption(SSE).
Identity-Based Encryption(IBE).
Attribute-Based Encryption(ABE).
Security Requirements.

12. Searchable Symmetric Encryption
SSE allows data owners to store encrypted documents on
remote server, which is modeled as honest-but-curious party,
and simultaneously provides away to search over the encrypted
documents.
Key Gen(s): This function is used by the users to generate
keys to initialize the scheme.
Build Idx (D,K): The user runs this function to build the
indexes, denoted by I, for a collection of document .
Trapdoor(K ,w): The user runs this function to compute
a trapdoor for a keyword enabling searching .
Search(I, Tw ): This function is executed by the remote
server to search for documents containing the user defined
keyword.

13. Identity-Based Encryption
 A practical IBE scheme in the random oracle model was
proposed by Bone h and Franklin . Identity-based systems
allow any party to generate a public key from a known
identity value, for example, the string “alice@xyz.com”
for Alice.
 IBE makes it possible for any party to encrypt message
with no prior distribution of keys between individuals. It is
an important application of the pairing-based
cryptography.

14. Attribute-Based Encryption
 ABE has shown its promising future in fine-grained access
control for outsourced sensitive data.
 Typically, data are encrypted by the owner under a set of
attributes.
 The parties accessing the data are assigned access
structures by the owner and can decrypt the data only if
the access structures match the data attributes.

15. Security Requirements
Storage Privacy: Storage on the public cloud is subject to
five privacy requirements.
a) Data confidentiality: unauthorized parties should
not learn the content of the stored data.
b) Anonymity: no particular user can be associated
with the storage and retrieval process.
c) Unlink ability: unauthorized parties should not be
able to link multiple data files to profile a user. It indicates
that the file identifiers should appear random and leak no
useful information.

16. Security Requirement(Cont..)
d) Keyword privacy: the keyword used for search should
remain confidential because it may contain sensitive
information, which will prevent the public cloud from
searching for the desired data files.
e) Search pattern privacy: whether the searches were
for the same keyword or not, and the access pattern.
Audit ability: In emergency data access, the users may be
physically unable to grant data access or without the perfect
knowledge to decide if the data requester is a legitimate EMT.

17. System Requirement
Hardware Requirements:-
SYSTEM : Pentium IV 2.4 GHz
HARD DISK : 40 GB
RAM : 256 MB

18. System Requirement(Cont..)
Software Requirements:-
Operating system : windows.
IDE : Netbeans
Database : MY-SQL server 5.0
Coding Language : java

19. Reference
 N.Cao,Z.Yang,C.Wang,K.Ren,and W.Lou,” Privacy-
preserving query over encrypted graph-structured data in
cloud computing,”
 J.Benaloh, M.Chase,E. Horvitz,and K. Lauter, “Patient
Contrlled encryption: Ensuring privacy of electronic
medical records,”
 M.Li,S.Yu,Y.Zheng,K.Lauter and W.Lou,“Scalable and
secure sharing of personal health records in cloud
computing using attribute –based encryption,”

20. Thank you