Research on Medical Data Auditing and Revocation Mechanisms in Trusted Execution Environments

ABSTRACT

In multi‐owner medical data sharing environments, ensuring the integrity of audit records and enabling timely access rights revocation for violating users remain critical challenges. To address these issues, this paper proposes a trusted execution environment (TEE)‐based auditing and access rights revocation scheme for medical data sharing. The scheme employs the isolated execution and sealed storage capabilities of TEE to protect critical audit operations and securely maintain access authorization status. A hash chain‐based audit log protection method is designed to preserve the integrity and verifiability of access records, thereby supporting tamper detection and accountability tracing. Furthermore, a collaborative revocation mechanism involving multiple data owners is introduced to revoke user attributes or access rights when abnormal access is detected or a violation is externally confirmed, establishing a linkage between auditing and revocation. Security analysis and prototype evaluation indicate that the proposed scheme enhances audit log integrity, access‐trace verifiability, and the effectiveness of access rights revocation, while maintaining acceptable computational and communication overheads.