The DOI matches its Crossref record.
Secure sharing of mHealth data streams through cryptographically-enforced access control
Open accessAbstract
Owners of mobile-health apps and devices often want to share their mHealth data with others, such as physicians, therapists, coaches, and caregivers. For privacy reasons, however, they typically want to share a limited subset of their information with each recipient according to their preferences. In this paper, we introduce ShareHealth, a scalable, usable, and practical system that allows mHealth-data owners to specify access-control policies and to cryptographically enforce those policies so that only parties with the proper corresponding permissions are able to decrypt data. The design and prototype implementation of this system make three contributions: (1) they apply cryptographically-enforced access-control measures to stream-based (specifically mHealth) data, (2) they recognize the temporal nature of mHealth data streams and support revocation of access to part or all of a data stream, and (3) they depart from the vendor- and device-specific silos of mHealth data by implementing a secure end-to-end system that can be applied to data collected from a variety of mHealth apps and devices.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The application of design guidelines was described in only five papers, which provided design recommendations to be applied during app development and conducted evaluation studies to validate their findings.
“The application of design guidelines was described in only ve papers, which provided design recommendations to be applied during the process of app development, and conducted evaluation studies to validate their ndings [95], [105], [107] [109].”
From Security and Privacy of mHealth Applications: A Scoping Review (2020) · cites this paper as [95]
Section 5 (Implementation; page unavailable) describes a prototype mHealth app, and Section 6 (Evaluation; page unavailable) reports security analysis and performance experiments. The paper does not present app-development design guidelines or an evaluation validating such guidelines. As one of several papers cited for the sentence, it also cannot substantiate the count of five papers. (LLM, conf=0.82)
Experimental — accuracy not yet measuredGreene et al. report on three security models applicable to sharing of mHealth data streams: adversary model, threat model, and trust model.
“Greene et al. report on three security models that could be applied to the sharing of mHealth data streams, namely the adversary model, threat model, and trust model [95].”
From Security and Privacy of mHealth Applications: A Scoping Review (2020) · cites this paper as [95]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
No references could be resolved yet.
Research works printed but not linked: 18
- Ambrosin, M., Conti, M., & Dargahi, T. (2015). On the feasibility of attribute-based encryption on smartphone devices. In Proceedings of the Workshop on IoT Challenges in Mobile and Industrial Systems (IoT-Sys), pp. 49–54. ACM. URL 〈http://dx.doi.org/10.1145/2753476.2753482〉. · DOI
- Benaloh, J., Chase, M., Horvitz, E., & Lauter, K. (2009). Patient controlled encryption: ensuring privacy of electronic medical records. In Proceedings of the ACM Workshop on Cloud Computing Security (CCSW), pp. 103–114. ACM. URL 〈http://dx.doi.org/10.1145/1655008.1655024〉. · DOI
- Caine, 2013, Patients want granular privacy control over health information in electronic medical records, Journal of the American Medical Informatics Association, 20, 7, 10.1136/amiajnl-2012-001023 · DOI
- Caine, K., Kohn, S., Lawrence, C., Hanania, R., Meslin, E., & Tierney, W. (2015). Designing a patient-centered user interface for access decisions about ehr data: Implications from patient interviews. 30 (1), 7-16. URL 〈http://dx.doi.org/10.1007/s11606-014-3049-9〉. · DOI
- Garrison, W.C., Shull, A., Myers, S., & Lee, A.J. (2016). On the practicality of cryptographically enforcing dynamic access control policies in the cloud (extended version). URL 〈http://arxiv.org/abs/1602.09069〉. · DOI
- Goyal, V., Pandey, O., Sahai, A., & Waters, B. (2006). Attribute-based encryption for fine-grained access control of encrypted data. In Proceedings of the ACM Conference on Computer and Communications Security (CCS), pp. 89–98. ACM. URL 〈http://dx.doi.org/10.1145/1180405.1180418〉. · DOI
- Gudes, 1980, The design of a cryptography based secure file system, IEEE Transactions on Software Engineering, SE-6, 411, 10.1109/TSE.1980.230489 · DOI
- Guo, 2016, Fine-grained database field search using attribute-based encryption for e-healthcare clouds, Journal of Medical Systems, 40, 1, 10.1007/s10916-016-0588-0 · DOI
- Haber, 1991, How to time-stamp a digital document, Journal of Cryptology, 3, 99, 10.1007/BF00196791 · DOI · Paper page
- Hester, J., Peters, T., Yun, T., Peterson, R., Skinner, J., Golla, B., Storer, K., Hearndon, S., Freeman, K., Lord, S., Halter, R., Kotz, D., & Sorber, J. (2016). Amulet: An energy-efficient, multi-application wearable platform. In Proceedings of the ACM Conference on Embedded Networked Sensor Systems (SenSys), pp. 216–229. ACM Press. URL 〈http://dx.doi.org/10.1145/2994551.2994554〉. · DOI
- Intille, 2016, The precision medicine initiative and pervasive health research, IEEE Pervasive Computing, 15, 88, 10.1109/MPRV.2016.2 · DOI
- McCune, J.M., Perrig, A., & Reiter, M.K. (2005). Seeing-is-believing: using camera phones for human-verifiable authentication. In Proceedings of the IEEE Symposium on Security and Privacy, pp. 110–124. IEEE Computer Society. URL 〈http://dx.doi.org/10.1109/sp.2005.19〉. · DOI
- Reeder, R.W., Bauer, L., Cranor, L.F., Reiter, M.K., Bacon, K., How, K., & Strong, H. (2008). Expandable grids for visualizing and authoring computer security policies. In Proceedings of the Conference on Human Factors in Computing Systems (CHI), pp. 1473–1482. ACM. URL 〈http://www.robreeder.com/pubs/xGridsCHI2008.pdf〉. · DOI
- Sahai, A., & Waters, B. (2005). Fuzzy identity-based encryption. In Proceedings of Advances in Cryptology (EUROCRYPT), vol. 3494, pp. 457–473. Springer-Verlag. URL 〈http://dx.doi.org/10.1007/11426639_27〉. · DOI
- Six, J. (2011). Application Security for the Android Platform. O'Reilly Media. URL 〈http://shop.oreilly.com/product/0636920022596.do〉.
- Zain, S., Fong, P.W.L., Crampton, J., & Sellwood, J. (2015). Relationship-based access control for an open-source medical records system. In Proceedings of the ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 113–124. ACM. URL 〈http://dx.doi.org/10.1145/2752952.2752962〉. · DOI
- Zheng, Y. (2011). Privacy-Preserving Personal Health Record System Using Attribute-Based Encryption. Master’s thesis, Worcester Polytechnic Institute. URL 〈http://citeseerx.ist.psu.edu/viewdoc/summary?Doi=10.1.1.469.3312〉.
- Zickau, S., Thatmann, D., Butyrtschik, A., Denisow, I., & Küpper, A. (2016). Applied attribute-based encryption schemes. In Proceedings of the International Conference on Innovations in Clouds, Internet and Networks (ICIN), pp. 88–95. IFIP Open Digital Library. URL 〈http://dl.ifip.org/db/conf/icin/icin2016/1570228068.pdf〉.
Cited by
Sorted by citations
Security and Privacy of mHealth Applications: A Scoping Review
Nurgalieva, L., O'Callaghan, D., & Doherty, G. (2020) · IEEE Access · doi:10.1109/access.2020.2999934 · Cited by 132
“Finally, Greene et al. report on three security models that could be applied to the sharing of mHealth data streams, namely the adversary model, threat model, and trust model [95].”
BackgroundMethod
Metadata
- Authors
- Greene, E., Proctor, P., & Kotz, D.
- Affiliations
- Dartmouth College (US)
- Corresponding author
- Kotz, David
- ORCID
- Kotz, David
- Venue
- Smart Health
- Publisher
- Elsevier BV
- Published
- 2019-04
- Volume
- 12
- Pages
- 49-65
- ISSN
- 2352-6483 (ISSN-L)
- PMC
- PMC6785041
- OpenAlex
- W2799473191
- Cited by
- 22
- References
- 0
- Citations by year
- 2026: 2 · 2024: 2 · 2023: 6 · 2022: 4 · 2021: 1 · 2020: 5 · 2019: 2
- FWCI
- 1.09
- Type
- journal article
- Language
- en
- Open access
- green
- www.ncbi.nlm.nih.gov
- Locations
- Smart Health (publishedVersion)
- PubMed (publishedVersion)
- Europe PMC (PubMed Central) (acceptedVersion)
- PubMed Central (acceptedVersion)
- Funders
- National Science Foundation (CNS-1619970, CNS-1314281)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Cryptography and Data Security
- Physical Sciences › Computer Science › Information Systems › Blockchain Technology Applications and Security
- Physical Sciences › Computer Science › Computer Networks and Communications › Access Control and Trust
- Keywords
- data streams, access revocation, end-to-end security, data privacy, mobile health apps, data silos
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
