Privacy-Enhanced Data Sharing in Multi-Institutional Healthcare

In multi-institutional patient data sharing scenarios, maintaining fine-grained access control while safeguarding privacy and adapting to real-world environments is crucial. Traditional attribute-based encryption (ABE) schemes may inadvertently expose sensitive information through access policies and lack support for dynamic policy updates. To tackle these challenges, this paper proposes an ABE scheme with partially hidden access policies to bolster privacy protection for encrypted data stored on servers across healthcare institutions. Our scheme also facilitates access policy updates, ensuring accurate and efficient adaptation to evolving real-world needs. Through rigorous security analysis, we validate the efficacy of our approach in safeguarding patient data integrity, confidentiality, and adaptability to dynamic environments. Our scheme offers a robust solution for secure and efficient multi-institutional patient data sharing, supporting fine-grained access control, privacy preservation, and dynamic policy updates.