UCL Discovery
UCL home » Library Services » Electronic resources » UCL Discovery

Privacy-Aware Cloud Auditing for GDPR Compliance Verification in Online Healthcare

Barati, M; Aujla, GS; Llanos, JT; Duodu, KA; Rana, OF; Carr, M; Rajan, R; (2021) Privacy-Aware Cloud Auditing for GDPR Compliance Verification in Online Healthcare. IEEE Transactions on Industrial Informatics 10.1109/tii.2021.3100152. (In press). Green open access

[thumbnail of Privacy-Aware_Cloud_Auditing_for_GDPR_Compliance_Verification_in_Online_Healthcare.pdf]
Preview
Text
Privacy-Aware_Cloud_Auditing_for_GDPR_Compliance_Verification_in_Online_Healthcare.pdf - Accepted Version

Download (1MB) | Preview

Abstract

Emerging multi-tenant cloud computing ecosystems allow multiple applications to share virtualised pool of computing and networking resources. As a result such ecosystems are becoming increasingly prone to data privacy concerns (personal data leakages and unauthorised access). While cloud computing providers support robust security and privacy mechanisms (e.g, public key cryptography, firewalls, virtual private networks, among many others), they lack mechanisms and frameworks to monitor, audit and verify these data privacy concerns. The emergence of data protection regulations around the world, such as General Data Protection Regulation (GDPR) in Europe and the Data Protection Act (DPA) in the UK, further emphasise the need to overcome these privacy limitations. A novel technique for monitoring, auditing and verifying the operations carried out on a users personal data in cloud computing ecosystems is proposed. Our research methodology leverages distributed ledger technologies (e.g., Blockchain, Smart Contracts) for developing an immutable recording technique, which transparently logs, monitors and verifies the operations carried out on user data. Using a healthcare pharmacy scenario and extensive real-world experiments, we validate the feasibility of the proposed technique. The proposed work handles a large pool of requests (> 13K) ensuring minimal latency (approx. 50-60 ms) and overheads for three different service packages varied with respect to the number of actors and operations).

Type: Article
Title: Privacy-Aware Cloud Auditing for GDPR Compliance Verification in Online Healthcare
Open access status: An open access version is available from UCL Discovery
DOI: 10.1109/tii.2021.3100152
Publisher version: https://doi.org/10.1109/TII.2021.3100152
Language: English
Additional information: This version is the author accepted manuscript. For information on re-use, please refer to the publisher's terms and conditions.
UCL classification: UCL
UCL > Provost and Vice Provost Offices > UCL BEAMS
UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science
UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Computer Science
URI: https://discovery.ucl.ac.uk/id/eprint/10133093
Downloads since deposit
Loading...
829Downloads
Download activity - last month
Loading...
Download activity - last 12 months
Loading...
Downloads by country - last 12 months
Loading...

Archive Staff Only

View Item View Item