Mobile health (mHealth) has emerged as a new patient centric model which allows real-time collection of patient data via wearable sensors, aggregation and encryption of these data at mobile devices, and then uploading the encrypted data to the cloud for storage and access by healthcare staff and researchers. However, efficient and scalable sharing of encrypted data has been a very challenging problem. In this paper, we propose a Lightweight Sharable and Traceable (LiST) secure mobile health system in which patient data are encrypted end-to-end from a patient's mobile device to data users. LiST enables efficient keyword search and fine-grained access control of encrypted data, supports tracing of traitors who sell their search and access privileges for monetary gain, and allows on-demand user revocation. LiST is lightweight in the sense that it offloads most of the heavy cryptographic computations to the cloud while only lightweight operations are performed at the end user devices. We formally define the security of LiST and prove that it is secure without random oracle. We also conduct extensive experiments to access the system's performance.

中文翻译：

---

轻量级可共享和可追溯的安全移动健康系统

移动健康 (mHealth) 已成为一种新的以患者为中心的模式，它允许通过可穿戴传感器实时收集患者数据，在移动设备上聚合和加密这些数据，然后将加密的数据上传到云端进行存储和访问医护人员和研究人员。然而，加密数据的高效和可扩展共享一直是一个非常具有挑战性的问题。在本文中，我们提出了一种轻量级可共享和可追踪 (LiST) 安全移动健康系统，其中患者数据从患者的移动设备到数据用户进行端到端加密。LiST 实现了对加密数据的高效关键字搜索和细粒度访问控制，支持追踪为了金钱利益而出售搜索和访问权限的叛徒，并允许按需撤销用户。从某种意义上说，LiST 是轻量级的，它将大部分繁重的加密计算卸载到云中，而在最终用户设备上仅执行轻量级操作。我们正式定义了 LiST 的安全性，并证明它在没有随机预言机的情况下是安全的。我们还进行了广泛的实验来访问系统的性能。