关键词: 电子病历, 密钥协商, 密文检索, e-CK模型

Abstract: The development of information technology and big data has promoted the informatization of medical records. As one of the representatives, the Electronic Medical Record（EMR） system has changed the mode of traditional medical data management, but there remains some problems such as identity authentication and privacy protection. To solve these problems, this paper proposes an identity based authenticated key agreement protocol. The key agreement server follows this protocol and fetches a session key, which will be used to encrypt the data. Secure and efficient signature algorithm is also used to guarantee the authenticity of data. Finally, the secure data management can be achieved. It is proved that this scheme has perfect forward security and is able to resist the unknown key sharing attack and key-compromise impersonation under the e-CK model. In addition, the core key agreement protocol in this scheme is designed to support sharing key confirmation property with an implicit authentication algorithm.

Key words: electronic medical record, key agreement, encrypted search, e-CK model