Access Control of Medical Images using Elliptic Curve Cryptography through Effective Multi
Scientific & Academic Publishing Tmkk Jinasena Rgn Meegama Rb Marasinghe
Tmkk Jinasena1, Rgn Meegama1, Rb Marasinghe2

1Department of Computer Science, University of Sri Jayewardenepura, Sri Lanka

2Department of Medical Education and Health Sciences, University of Sri Jayewardenepura, Sri Lanka

Correspondence to: Tmkk Jinasena, Department of Computer Science, University of Sri Jayewardenepura, Sri Lanka.

Email:

Copyright Â© 2017 Scientific & Academic Publishing. All Rights Reserved.

This work is licensed under the Creative Commons Attribution International License (CC BY).

http://creativecommons.org/licenses/by/4.0/

Abstract

Access control is so vital in eHealth, because compromised sensitive medical data often leads to severe consequences for both patients and health workers, resulting in financial losses or even patient death. In this paper, we propose a technique to implement a dynamic and flexible access control mechanism to ensure present access rights of sensitive medical data in a collaborative medical discussion in a mobile environment. Initially, a symmetric and public key encryption using elliptic curve cryptography is used to encrypt a user session. At this stage, the elliptic curve is defined in a prime finite field with the characteristic of p where p is a prime and p > 3. Curve parameters a and b are carefully chosen to avoid vulnerable curves. Subsequently, unique public and private key pairs are generated for all the users in the session. Results show the importance of having optimal elliptic curve implementations for mobile usage.

Keywords: Access Control, Elliptic Curves, Cryptography, Privacy, eHealth