With more widespread usage of digital healthcare records, it has been argued that such systems would face serious challenges in protecting patient-specific data from unauthorized accesses, data breaches, and malicious alterations.  Healthcare information systems utilized for EHR management need to ensure data confidentiality,  restricted access, and integrity, using an appropriate security model.  In this regard,  a privacy-preserving healthcare security framework for electronic health record (EHR) systems has been designed based on encryption, role-based access control, and cryptographic hashing integrity, which would uphold privacy of the EHR. It involves the use of advanced encryption standard (AES-256-GCM) encryption of patient information, multi-factor verification for user authentication, role-based permission granularity of information access, patient records integrity verification using hash code calculations,  and tamper-proof audit trails for audit data integrity. The privacy-preserving healthcare security framework will be tested for its efficacy in guarding against unauthorized access and record manipulation in addition to its efficacy in maintaining low latency, processing overhead, and ensuring user data confidentiality.

 

Keywords: Healthcare Cybersecurity, Electronic Health Records, Data Privacy, AES-256-GCM Encryption, SHA-256 Hashing, Data Integrity Verification.