Hence to resolve these problems we need to have an efficient model that can work even on non-trusted third party servers. The concept of encryption can highly serve this purpose. The PHR file owner has the control to encrypt the confidential data using any of the encryption models before it is stored in the cloud server. Now the PHR file can be accessed only by the users who have the decryption key. In this case the owner can take rights of deciding who can have the authorization to access the PHR. But the major drawback with this approach is since it is patient-centric; the limitation is that the patient may not be available online all the time to provide access to the user. Hence a work around has to be proposed for the same. The most possible solution to the above problem is to employ a central authority to perform key management for all PHR owners but again this involves a lot of authentication and trust