skip to main content
10.1145/3340531.3417421acmconferencesArticle/Chapter ViewAbstractPublication PagescikmConference Proceedingsconference-collections
short-paper

Vallum-Med: Protecting Medical Data in Cloud Environments

Published: 19 October 2020 Publication History

Abstract

Despite the many advantages of cloud computing, keeping information in such an environment increases the risk of cyber attacks, as well as the possibility of unauthorized access by cloud provider employees. Another critical concern is privacy protection, since depending on data access control, confidential information may be exposed even through authorized access. To solve these issues we have previously proposed Vallum, a platform that leverages Intel SGX protection to ensure the security, confidentiality, and integrity of data at rest and during processing. It also provides tools for privacy protection, following policies set by the data owner. In this demo we present Vallum-Med, an application of Vallum for the protection of medical patient personal data, including imaging results of their cardiac examinations. We will demonstrate that this system fully supports cloud protection of such sensitive data as well as the definition of privacy policies and ensuring that all results of queries are compliant to these policies. All processing, data storage and network traffic are protected using SCONE, a docker container-based technology for seamlessly incorporating SGX protection for applications, which provides a fully encrypted memory environment.

Supplementary Material

MP4 File (3340531.3417421.mp4)
In this video, we present a secure app called Vallum-Med, to address medical data protection and privacy in a cloud computing environment.

References

[1]
Sergei Arnautov, Bohdan Trach, Franz Gregor, Thomas Knauth, Andre Martin, Christian Priebe, Joshua Lind, Divya Muthukumaran, Dan O'Keeffe, Mark L. Stillwell, David Goltzsche, Dave Eyers, Rüdiger Kapitza, Peter Pietzuch, and Christof Fetzer. 2016. SCONE: Secure Linux Containers with Intel SGX. In 12th USENIX Symposium on Operating Systems Design and Implementation (OSDI 16). USENIX Association, Savannah, GA, 689--703.
[2]
Victor Costan and Srinivas Devadas. 2016. Intel SGX Explained. IACR Cryptology ePrint Archive 2016 (2016), 86.
[3]
David F. Ferraiolo and D. Richard Kuhn. 2009. Role-Based Access Controls. CoRR abs/0903.2171 (2009).
[4]
Lena Griebel, Hans-Ulrich Prokosch, Felix Köpcke, Dennis Toddenroth, Jan Christoph, Ines Leb, Igor Engel, and Martin Sedlmayr. 2015. A scoping review of cloud computing in healthcare. BMC Med. Inf. & Decision Making 15 (2015), 17.
[5]
Danny Harnik, Eliad Tsfadia, Doron Chen, and Ronen I. Kat. 2018. Securing the Storage Data Path with SGX Enclaves. CoRR abs/1806.10883 (2018).
[6]
W. A. Jansen. 2011. Cloud Hooks: Security and Privacy Issues in Cloud Computing. In 2011 44th Hawaii International Conference on System Sciences. 1--10.
[7]
R. Peterson, A. Carvalho, A. da Silva, G. Fernandez, A. Martin, C. Fetzer, and A. Brito. 2019. Vallum: Privacy, Confidentiality and Access Control for Sensitive Data in Cloud Environments. In 2019 IEEE International Conference on Cloud Computing Technology and Science (CloudCom). 103--110.
[8]
Fabian Prasser, Johanna Eicher, Helmut Spengler, Raffael Bild, and Klaus A. Kuhn. 2020. Flexible data anonymization using ARX?Current status and challenges ahead. Software: Practice and Experience 50, 7 (2020), 1277--1304.
[9]
M. Sadegh Riazi, Kim Laine, Blake Pelton, and Wei Dai. 2020. HEAX. In Proceedings of the Twenty-Fifth International Conference on Architectural Support for Programming Languages and Operating Systems.
[10]
Dave (Jing) Tian, Joseph I. Choi, Grant Hernandez, Patrick Traynor, and Kevin R. B. Butler. 2019. A Practical Intel SGX Setting for Linux Containers in the Cloud. In CODASPY. 255--266.
[11]
Zahra Zandesh, Marjan Ghazisaeedi, Murthy V. Devarakonda, and Mohammad Sayad Haghighi. 2019. Legal framework for health cloud: A systematic review. International Journal of Medical Informatics 132 (2019), 103953.

Cited By

View all
  • (2023)Intel Software Guard Extensions Applications: A SurveyACM Computing Surveys10.1145/359302155:14s(1-38)Online publication date: 17-Jul-2023
  • (2021)On Detecting Cloud Container Failures from Computing Utility Sequences2021 22nd Asia-Pacific Network Operations and Management Symposium (APNOMS)10.23919/APNOMS52696.2021.9562640(358-361)Online publication date: 8-Sep-2021

Index Terms

  1. Vallum-Med: Protecting Medical Data in Cloud Environments

    Recommendations

    Comments

    Information & Contributors

    Information

    Published In

    cover image ACM Conferences
    CIKM '20: Proceedings of the 29th ACM International Conference on Information & Knowledge Management
    October 2020
    3619 pages
    ISBN:9781450368599
    DOI:10.1145/3340531
    Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

    Sponsors

    Publisher

    Association for Computing Machinery

    New York, NY, United States

    Publication History

    Published: 19 October 2020

    Permissions

    Request permissions for this article.

    Check for updates

    Author Tags

    1. cloud computing
    2. medical data
    3. privacy
    4. security

    Qualifiers

    • Short-paper

    Funding Sources

    • European Community's Framework Program Horizon 2020
    • Coordenacao de Aperfeioamento de Pessoal de Novel Superior - Brasil

    Conference

    CIKM '20
    Sponsor:

    Acceptance Rates

    Overall Acceptance Rate 1,861 of 8,427 submissions, 22%

    Upcoming Conference

    CIKM '25

    Contributors

    Other Metrics

    Bibliometrics & Citations

    Bibliometrics

    Article Metrics

    • Downloads (Last 12 months)13
    • Downloads (Last 6 weeks)1
    Reflects downloads up to 28 Feb 2025

    Other Metrics

    Citations

    Cited By

    View all
    • (2023)Intel Software Guard Extensions Applications: A SurveyACM Computing Surveys10.1145/359302155:14s(1-38)Online publication date: 17-Jul-2023
    • (2021)On Detecting Cloud Container Failures from Computing Utility Sequences2021 22nd Asia-Pacific Network Operations and Management Symposium (APNOMS)10.23919/APNOMS52696.2021.9562640(358-361)Online publication date: 8-Sep-2021

    View Options

    Login options

    View options

    PDF

    View or Download as a PDF file.

    PDF

    eReader

    View online with eReader.

    eReader

    Figures

    Tables

    Media

    Share

    Share

    Share this Publication link

    Share on social media