Attribute-Based Encryption with Secure Multi-Party Computation for Fine-Grained Access Control in Cloud-Based Healthcare Systems.

Authors

Asheshemi Nelson Oghenekevwe

Department of Computer Science, Federal Polytechnic Orogun, Delta State., Department of Computer Science, Delta State University Abraka, Delta State (Nigeria)

Michael Adawaren

Department of Computer Science, Delta State University Abraka, Delta State (Nigeria)

Article Information

DOI: 10.51244/IJRSI.2025.1213CS0022

Subject Category: Computer Science

Volume/Issue: 12/13 | Page No: 267-282

Publication Timeline

Submitted: 2025-12-25

Accepted: 2025-12-31

Published: 2026-01-15

Abstract

Cloud-based healthcare systems have transformed the management and sharing of electronic health records (EHRs), telemedicine data, and collaborative medical research by offering scalability, cost efficiency, and real time accessibility. However, this transformation exposes patient data to risks such as breaches, insider threats, and unauthorized disclosures. Traditional access control mechanisms like Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and Identity-Based Encryption (IBE) prove insufficient in dynamic, multi-stakeholder healthcare environments. This research proposes a hybrid framework integrating Attribute Based Encryption (ABE) for fine-grained, policy-driven confidentiality and Secure Multi-Party Computation (SMC) for privacy-preserving collaborative analytics. The framework ensures that sensitive health data remains protected while enabling secure computations across distributed institutions. ABE enforces patient- and context centric access policies, while SMC enables multi-institutional analytics without exposing raw records. The proposed system is evaluated through security analysis and performance benchmarks, highlighting trade-offs between encryption costs, ciphertext expansion, computation overheads, and communication latency. The results demonstrate that ABE + SMC integration can achieve confidentiality, collusion resistance, and regulatory compliance (HIPAA/GDPR), while supporting practical applications such as multi-hospital predictive analytics, genomics, and clinical trials. Despite challenges in key management, revocation, and computational scalability, this hybrid model represents a paradigm shift toward secure, collaborative, and patient-centric healthcare ecosystems.

Keywords

Attribute-Based Encryption; Secure Multi-Party Computation; Cloud Healthcare Security; Fine Grained Access Control; Privacy-Preserving Analytics; Electronic Health Records.

Downloads

References

1. Azbeg, K., Ouchetto, O., & Jai Andaloussi, S. (2023). Access Control and Privacy-Preserving BlockchainBased System for Diseases Management. IEEE Transactions on Computational Social Systems, 10, 15151527. [Google Scholar] [Crossref]

2. Choksy, P., Chaurasia, A., Rao, U.P., & Kumar, S. (2023). Attribute based access control (ABAC) scheme with a fully flexible delegation mechanism for IoT healthcare. Peer-to-Peer Networking and Applications, 16, 1445 - 1467. [Google Scholar] [Crossref]

3. Deebak, B.D., & Hwang, S.O. (2024). Healthcare Applications Using Blockchain With a Cloud-Assisted Decentralized Privacy-Preserving Framework. IEEE Transactions on Mobile Computing, 23, 5897-5916. [Google Scholar] [Crossref]

4. Ganesan, T., Devarajan, M.V., Yallamelli, A.R., Mamidala, V., Yalla, R.K., & Sambas, A. (2024). Blockchain and Cloud-Based Secure Healthcare: Attribute-Based Proxy Re-Encryption with Multi-Factor Authentication for Data Integrity and Access Control. 2024 International Conference on Emerging Research in Computational Science (ICERCS), 1-5. [Google Scholar] [Crossref]

5. He, Z., Chen, Y., Luo, Y., Zhang, L., & Tang, Y. (2023). Revocable and Traceable Undeniable AttributeBased Encryption in Cloud-Enabled E-Health Systems. Entropy, 26. [Google Scholar] [Crossref]

6. Kaushik, S., & Gandhi, C. (2022). Capability-Based Access Control With Trust for Effective Healthcare Systems. Int. J. Cloud Appl. Comput., 12, 1-28. [Google Scholar] [Crossref]

7. Madavarapu, J.B., Yalamanchili, R.K., & Mandhala, V.N. (2023). An Ensemble Data Security on Cloud Healthcare Systems. 2023 4th International Conference on Smart Electronics and Communication (ICOSEC), 680-686. [Google Scholar] [Crossref]

8. Mupila, F.K., Gupta, H., & Bhardwaj, A. (2025). AI-Driven Adaptive Access Control in Multi-Cloud Environments: A Cognitive Security Framework. Journal of Information Systems Engineering and Management. [Google Scholar] [Crossref]

9. Ovie, A.S., & Akinloye, B.O. (2025). A Differential Privacy-Preserving Framework for Secure CloudBased Medical Information Systems. Journal of Engineering Research and Reports. [Google Scholar] [Crossref]

10. Prasanna,, G.L. (2025). Privacy Preserving Data Sharing Cloud-Based Healthcare Systems. Interantional Journal Of Scientific Research In Engineering And Management. [Google Scholar] [Crossref]

11. Raman, D.R., Rabadiya, M.D., Kumar, D.V., Patre, D.S., Pillai, D.B., & Meenakshi, D.R. (2024). AIDriven Remote Parkinson’s Diagnosis with BPNN Framework and Cloud-Based Data Security. 2024 International Conference on Knowledge Engineering and Communication Systems (ICKECS), 1, 1-6. [Google Scholar] [Crossref]

12. Saini, A., Zhu, Q., Singh, N., Xiang, Y., Gao, L., & Zhang, Y. (2021). A Smart-Contract-Based Access Control Framework for Cloud Smart Healthcare System. IEEE Internet of Things Journal, 8, 5914-5925. [Google Scholar] [Crossref]

13. Samonte, M.J., Calpo, A.H., Colot, M.E., & Mirafuentes, C.A. (2024). Security Design Analysis of Attribute-Based Encryption with Homomorphic Overlays for Secure and Fine-Grained Access Control of Patient Lab Results in Cloud-Based Healthcare Systems. 2024 17th International Conference on Advanced Computer Theory and Engineering (ICACTE), 43-51. [Google Scholar] [Crossref]

14. Samonte, M.J., Calpo, A.H., Colot, M.E., & Mirafuentes, C.A. (2024). Security Design Analysis of Attribute-Based Encryption with Homomorphic Overlays for Secure and Fine-Grained Access Control of Patient Lab Results in Cloud-Based Healthcare Systems. 2024 17th International Conference on Advanced Computer Theory and Engineering (ICACTE), 43-51. [Google Scholar] [Crossref]

15. Sharma, M. (2024). Security and Compliance in Cloud ERP Systems: A Deep Dive into Workday's Framework. International Scientific Journal of Engineering and Management. [Google Scholar] [Crossref]

16. Sharma, S., Garg, A., & Singh, P. (2025). Blockchain-Enabled Cloud Storage: A Secure and Decentralized Approach to Access Control and Data Sharing. 2025 Global Conference in Emerging Technology (GINOTECH), 1-6. [Google Scholar] [Crossref]

17. Sravanthi, T., & Kusuma, C.A. (2025). Securing Government Healthcare Services Through a G-Cloud Based Framework. Interantional Journal Of Scientific Research In Engineering And Management. [Google Scholar] [Crossref]

18. Sun, Y., Han, L., Bi, J., Tan, X., & Xie, Q. (2023). Verifiable attribute-based keyword search scheme over encrypted data for personal health records in cloud. Journal of Cloud Computing, 12, 1-13. [Google Scholar] [Crossref]

19. Thamrin, A., & Xu, H. (2021). Cloud-Based Blockchains for Secure and Reliable Big Data Storage Service in Healthcare Systems. 2021 IEEE International Conference on Service-Oriented System Engineering (SOSE), 91-99. [Google Scholar] [Crossref]

20. Yang, X., & Zhang, C. (2022). Blockchain-Based Multiple Authorities Attribute-Based Encryption for EHR Access Control Scheme. Applied Sciences. [Google Scholar] [Crossref]

Metrics

Views & Downloads

Similar Articles