Medical data hierarchical access control method and system based on attribute encryption

The invention provides a medical data hierarchical access control method and system based on attribute encryption. The method comprises data preprocessing and hierarchical access control. The data preprocessing is used for grading personal medical health data according to the sensitivity degree and dividing users according to the professional level, and preparation is made for subsequent fine-grained access control. Hierarchical access control is used for optimization and improvement on the basis of traditional attribute-based encryption, and while different access control strategies are implemented on different levels of data, calculation efficiency is improved, and reliable privacy protection is provided. 本发明提出一种基于属性加密的医疗数据分级访问控制方法和系统，包括数据预处理和分级访问控制。数据预处理用于将个人医疗健康数据按照敏感程度分级，并对使用方按专业等级进行划分，为后续实现细粒度访问控制做好准备。分级访问控制用于在传统属性基加密基础上进行优化改进，实现对不同级别数据实施不同访问控制策略的同时，既提高计算效率又提供可靠的隐私保护。