Integrity and Privacy-Aware, Patient-Centric Health Record Access Control Framework Using a Blockchain
Source abstract
Abstract
Blockchains are gaining traction as secure and reliable platforms for data sharing in fields such as banking, supply chain management, food production, energy, the Internet, and medical services. Furthermore, when decentralized, a blockchain can be regarded as an immutable ledger storing data entries. Moreover, this modern technology was designed to disrupt various data-driven industries, including the healthcare industry. While electronic healthcare services have enabled more straightforward and accessible treatment, patient privacy has become vulnerable to external and internal attacks by healthcare personnel. Therefore, we aimed to design a framework to control patient health records that ensures the patient can provide the necessary permissions to those who access his/her health records. This framework will record all activities via blockchain and usage control. Through this framework, we aim to create a user-centric and privacy-aware experience. A literature review and experiments have been performed to select an optimized and placable blockchain operating system. In addition, performance analysis showed that the OS and smart contracts work at an acceptable speed.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Blockchain Technology Applications and Security · IoT and Edge/Fog Computing · Privacy, Security, and Data Protection
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Faculty of Computer and Information Systems, Islamic University of Madinah, Madinah 42351, Saudi Arabia
References (100+)
Show source-provided references
1. Enhancing privacy and data security across healthcare applications using blockchain and distributed ledger concepts10.3390/healthcare8030243 ↗
2. Swan, M. (2015). Blockchain: Blueprint for a New Economy, O’Reilly Media, Inc.
3. Li, W., He, M., and Haiquan, S. (2021, January 18–20). An Overview of Blockchain Technology: Applications, Challenges and Future Trends. Proceedings of the 2021 IEEE 11th International Conference on Electronics Information and Emergency Communication (ICEIEC) 2021 IEEE 11th International Conference on Electronics Information and Emergency Communication (ICEIEC), Beijing, China.10.1109/ICEIEC51955.2021.9463842 ↗
4. Zheng, Z., Xie, S., Dai, H., Chen, X., and Wang, H. (2017, January 25–30). An overview of blockchain technology: Architecture, consensus, and future trends. Proceedings of the 2017 IEEE International Congress on Big Data (BigData Congress), Honolulu, HI, USA.10.1109/BigDataCongress.2017.85 ↗
5. A blockchain framework for patient-centered health records and exchange (HealthChain): Evaluation and proof-of-concept study10.2196/13592 ↗
6. Bitcoin: A peer-to-peer electronic cash system
7. A blockchain-based models for student information systems10.1016/j.eij.2021.12.002 ↗
8. Distributed ledger technology-based land transaction system with trusted nodes consensus mechanism
9. Security and privacy on blockchain10.1145/3158369 ↗
10. Applications of blockchain in ensuring the security and privacy of electronic health record systems: A survey10.1016/j.cose.2020.101966 ↗
11. LSB: A Lightweight Scalable Blockchain for IoT security and anonymity10.1016/j.jpdc.2019.08.005 ↗
12. Kosba, A., Miller, A., Shi, E., Wen, Z., and Papamanthou, C. (2016, January 22). Hawk: The blockchain model of cryptography and privacy-preserving smart contracts. Proceedings of the 2016 IEEE Symposium on Security and Privacy (SP), San Jose, CA, USA.10.1109/SP.2016.55 ↗
13. Meisami, S., Beheshti-Atashgah, M., and Aref, M.R. (2021). Using Blockchain to Achieve Decentralized Privacy In IoT Healthcare. arXiv.
14. On blockchain and its integration with IoT. Challenges and opportunities10.1016/j.future.2018.05.046 ↗
15. Ali, S., Wang, G., White, B., and Cottrell, R.L. (2018, January 1). A blockchain-based decentralized data storage and access framework for pinger. Proceedings of the 2018 17th IEEE International Conference on Trust, Security and Privacy in Computing and Communications/12th IEEE International Conference on Big Data Science and Engineering (TrustCom/BigDataSE), New York, NY, USA.10.1109/TrustCom/BigDataSE.2018.00179 ↗
16. What are the major ethical issues in conducting research? Is there a conflict between the research ethics and the nature of nursing?
17. On-chain vs. off-chain storage for supply-and blockchain integration
18. ACTION-EHR: Patient-centric blockchain-based electronic health record data management for cancer care10.2196/13598 ↗
19. Now the code runs itself: On-chain and off-chain governance of blockchain technologies10.1007/s11245-018-9626-5 ↗
20. Khatoon, A. (2020). A blockchain-based smart contract system for healthcare management. Electronics, 9.10.3390/electronics9010094 ↗
21. Combating health care fraud and abuse: Conceptualization and prototyping study of a blockchain antifraud framework10.2196/18623 ↗
22. Alansari, S. (2020). A Blockchain-Based Approach for Secure, Transparent and Accountable Personal Data Sharing. [Ph.D. Thesis, University of Southampton].
23. Security services using blockchains: A state of the art survey10.1109/COMST.2018.2863956 ↗
24. Preserving the privacy of electronic health records using blockchain10.1016/j.procs.2020.06.021 ↗
25. Yaga, D., Mell, P., Roby, N., and Scarfone, K. (2019). Blockchain technology overview. arXiv.10.6028/NIST.IR.8202 ↗
26. Hardjono, T., and Smith, N. (2016, January 30). Cloud-based commissioning of constrained devices using permissioned blockchains. Proceedings of the 2nd ACM International Workshop on IoT Privacy, Trust, and Security, Xi’an, China.10.1145/2899007.2899012 ↗
27. Applications of blockchains in the Internet of Things: A comprehensive survey10.1109/COMST.2018.2886932 ↗
28. Blockchains and smart contracts for the internet of things10.1109/ACCESS.2016.2566339 ↗
29. Lahbib, A. (2020). Distributed Management Framework Based on the Blockchain Technology for Industry 4.0 Environments. [Ph.D. Thesis, Institut Polytechnique de Paris].
30. Adler, J., Berryhill, R., Veneris, A., Poulos, Z., Veira, N., and Kastania, A. (2018, January 30). Astraea: A decentralized blockchain oracle. Proceedings of the 2018 IEEE International Conference on Internet of Things (IThings) and IEEE Green Computing and Communications (GreenCom) and IEEE Cyber, Physical and Social Computing (CPSCom) and IEEE Smart Data (SmartData), Halifax, NS, Canada.10.1109/Cybermatics_2018.2018.00207 ↗
31. Ellis, S. (2022, March 01). A Decentralized Oracle Network Steve Ellis, Ari Juels, and Sergey Nazarov. Available online: https://academy.bit2me.com/wp-content/uploads/2021/05/chainlink-whitepaper.pdf.
32. Zhang, F., Cecchetti, E., Croman, K., Juels, A., and Shi, E. (2016, January 24). Town crier: An authenticated data feed for smart contracts. Proceedings of the 2016 aCM sIGSAC Conference on Computer and Communications Security, Vienna, Austria.10.1145/2976749.2978326 ↗
33. Peterson, J., Krug, J., Zoltu, M., Williams, A.K., and Alexander, S. (2022, June 15). Augur: A Decentralized Oracle and Prediction Market Platform (v2. 0). Whitepaper 2019., Available online: https://augur.net/whitepaper.pdf.
34. Missier, P., Bajoudah, S., Capossele, A., Gaglione, A., and Nati, M. (2017, January 22). Mind my value: A decentralized infrastructure for fair and trusted iot data trading. Proceedings of the Seventh International Conference on the Internet of Things, Linz, Austria.10.1145/3131542.3131564 ↗
35. Guarnizo, J., and Szalachowski, P. (2019, January 23–27). PDFS: Practical data feed service for smart contracts. Proceedings of the European Symposium on Research in Computer Security, Luxembourg.10.1007/978-3-030-29959-0_37 ↗
36. Ritzdorf, H., Wüst, K., Gervais, A., Felley, G., and Capkun, S. (2017). TLS-N: Non-Repudiation over TLS Enabling-Ubiquitous Content Signing for Disintermediation, Cryptology ePrint Archive.10.14722/ndss.2018.23272 ↗
37. De Pedro, A.S., Levi, D., and Cuende, L.I. (2017). Witnet: A decentralized oracle network protocol. arXiv.
38. Hess, Z., Malahov, Y., and Pettersson, J. (2022, June 15). Æternity blockchain: The trustless, decentralized and purely functional oracle machine. In White Paper, Available online: https://blockchainlab.com/pdf/91ternity-blockchain-whitepaper.pdf.
39. Sztorc, P. (2022, March 01). Truthcoin. In Peer-to-Peer Oracle System and Prediction Marketplace, Available online: https://www.truthcoin.info/.
40. Mo, B., Su, K., Wei, S., Liu, C., and Guo, J. (August, January 31). A solution for internet of things based on blockchain technology. Proceedings of the 2018 IEEE International Conference on Service Operations and Logistics, and Informatics (SOLI), Singapore.10.1109/SOLI.2018.8476777 ↗
41. Liang, X., Zhao, J., Shetty, S., and Li, D. (2017, January 23–25). Towards data assurance and resilience in IoT using blockchain. Proceedings of the MILCOM 2017-2017 IEEE Military Communications Conference (MILCOM), Baltimore, MD, USA.10.1109/MILCOM.2017.8170858 ↗
42. Hepp, T., Wortner, P., Schönhals, A., and Gipp, B. (2018, January 15). Securing physical assets on the blockchain: Linking a novel object identification concept with distributed ledgers. Proceedings of the 1st Workshop on Cryptocurrencies and Blockchains for Distributed Systems, Munich, Germany.10.1145/3211933.3211944 ↗
43. EdgeChain: An edge-IoT framework and prototype based on blockchain and smart contracts10.1109/JIOT.2018.2878154 ↗
44. EdenChain: The programmable economy platform
45. Draskovic, D., and Saleh, G. (2017). Decentralized data marketplace based on blockchain. White Pap.
46. Michelin, R.A., Dorri, A., Steger, M., Lunardi, R.C., Kanhere, S.S., Jurdak, R., and Zorzo, A.F. (2018, January 5–7). SpeedyChain: A framework for decoupling data from blockchain for smart cities. Proceedings of the 15th EAI International Conference on Mobile and Ubiquitous Systems: Computing, Networking and Services, New York, NY, USA.10.1145/3286978.3287019 ↗
47. Lombardi, F., Aniello, L., De Angelis, S., Margheri, A., and Sassone, V. (2018). A Blockchain-Based Infrastructure for Reliable and Cost-Effective. IoT-Aided Smart Grids, IET.10.1049/cp.2018.0042 ↗
48. Continuous patient monitoring with a patient centric agent: A block architecture10.1109/ACCESS.2018.2846779 ↗
49. Blockchain for secure and efficient data sharing in vehicular edge computing and networks10.1109/JIOT.2018.2875542 ↗
50. Gao, Z., Xu, L., Turner, G., Patel, B., Diallo, N., Chen, L., and Shi, W. (2018, January 15). Blockchain-based identity management with mobile device. Proceedings of the 1st Workshop on Cryptocurrencies and Blockchains for Distributed Systems, Munich, Germany.10.1145/3211933.3211945 ↗
51. Distributed blockchain-based trusted multidomain collaboration for mobile edge computing in 5G and beyond10.1109/TII.2020.2964563 ↗
52. Blockchain-enabled tripartite anonymous identification trusted service provisioning in industrial IoT10.1109/JIOT.2021.3097440 ↗
53. Blockchain-based secure distributed control for software defined optical networking10.23919/JCC.2019.06.004 ↗
54. Marstein, K.E.H. (2019). Improve Auditing and Privacy of Electronic Health Records by Using Blockchain Technology. [Master’s Thesis, The University of Bergen].
55. Antonopoulos, A.M. (2014). Mastering Bitcoin: Unlocking Digital Cryptocurrencies, O’Reilly Media, Inc.
56. Comstedt, E. (2019). Increasing the Trust between Automotive Actors Using a Hyperledger Fabric Blockchain, DiVA.
57. Stinson, D.R. (2005). Cryptography: Theory and Practice, Chapman and Hall/CRC.10.1201/9781420057133 ↗
58. Thomsen, S.S., and Knudsen, L.R. (2022, July 25). Cryptographic Hash Functions. Ph.D. Thesis, Available online: https://backend.orbit.dtu.dk/ws/portalfiles/portal/5025771/sst_thesis_v1.0.pdf/.
59. Cryptography and computer privacy10.1038/scientificamerican0573-15 ↗
60. Merkle, R.C. (1982). Method of Providing Digital Signatures. (4,309,569), US Patent.
61. Merkle, R.C. (1989, January 20–24). A certified digital signature. Proceedings of the Conference on the Theory and Application of Cryptology, New York, NY, USA.
62. Cryptographic primitives in blockchains10.1016/j.jnca.2018.11.003 ↗
63. Implementing fault-tolerant services using the state machine approach: A tutorial10.1145/98163.98167 ↗
64. Buterin, V., and Griffith, V. (2017). Casper the friendly finality gadget. arXiv.
65. Sompolinsky, Y., and Zohar, A. (2015, January 26–30). Secure high-rate transaction processing in bitcoin. Proceedings of the International Conference on Financial Cryptography and Data Security, San Juan, Puerto Rico.10.1007/978-3-662-47854-7_32 ↗
66. Tamper-resistant mobile health using blockchain technology10.2196/mhealth.7938 ↗
67. Baset, S.A., Desrosiers, L., Gaur, N., Novotny, P., O’Dowd, A., and Ramakrishna, V. (2018). Hands-On Blockchain with Hyperledger: Building Decentralized Applications with Hyperledger Fabric and Composer, Packt Publishing Ltd.
68. Androulaki, E., Barger, A., Bortnikov, V., Cachin, C., Christidis, K., De Caro, A., Enyeart, D., Ferris, C., Laventman, G., and Manevich, Y. (2018, January 23–26). Hyperledger fabric: A distributed operating system for permissioned blockchains. Proceedings of the Thirteenth EuroSys Conference, Porto, Portugal.10.1145/3190508.3190538 ↗
69. Giammusso, S. (2019). Blockchain for Education Case Study on Hyperledger Fabric. [Ph.D. Thesis, Politecnico di Torino].
70. The UCONABC usage control model10.1145/984334.984339 ↗
71. Sandhu, R., and Park, J. (2003). Usage control: A vision for next generation access control. International Workshop on Mathematical Methods, Models, and Architectures for Computer Network Security, Springer.10.1007/978-3-540-45215-7_2 ↗
72. Park, J., and Sandhu, R. (2002, January 3). Towards usage control models: Beyond traditional access control. Proceedings of the Seventh ACM Symposium on Access Control Models and Technologies, Monterey, CA, USA.10.1145/507711.507722 ↗
73. Usage control in computer security: A survey10.1016/j.cosrev.2010.02.002 ↗
74. Zhang, X. (2006). Formal Model and Analysis of Usage Control, George Mason University.
75. Usage control model specification in xacml policy language
76. Katt, B., Zhang, X., Breu, R., Hafner, M., and Seifert, J.P. (2008, January 11–13). A general obligation model and continuity: Enhanced policy enforcement engine for usage control. Proceedings of the 13th ACM Symposium on Access Control Models and Technologies, Estes Park, CO, USA.10.1145/1377836.1377856 ↗
77. Healthcare blockchain system using smart contracts for secure automated remote patient monitoring10.1007/s10916-018-0982-x ↗
78. Azaria, A., Ekblaw, A., Vieira, T., and Lippman, A. (2016, January 22–24). Medrec: Using blockchain for medical data access and permission management. Proceedings of the 2016 2nd International Conference on Open and Big Data (OBD), Vienna, Austria.10.1109/OBD.2016.11 ↗
79. Applications of blockchain within healthcare
80. Kuo, T.T., and Ohno–Machado, L. (2018). Modelchain: Decentralized privacy-preserving healthcare predictive modeling framework on private blockchain networks. arXiv.
81. Dwivedi, A.D., Srivastava, G., Dhar, S., and Singh, R. (2019). A decentralized privacy-preserving healthcare blockchain for IoT. Sensors, 19.10.3390/s19020326 ↗
82. Zyskind, G., and Nathan, O. (2015, January 21–22). Decentralizing privacy: Using blockchain to protect personal data. Proceedings of the 2015 IEEE Security and Privacy Workshops, San Jose, CA, USA.10.1109/SPW.2015.27 ↗
83. Lee, T.F., Chang, I.P., and Kung, T.S. (2021). Blockchain-Based Healthcare Information Preservation Using Extended Chaotic Maps for HIPAA Privacy/Security Regulations. Appl. Sci., 11.10.3390/app112210576 ↗
84. Ivan, D. (2016). Moving toward a blockchain-based method for the secure storage of patient records. ONC/NIST Use of Blockchain for Healthcare and Research Workshop, ONC/NIST.
85. Blockchain-based medical records secure storage and medical service framework10.1007/s10916-018-1121-4 ↗
86. Improving patient safety through information technology
87. Primary health care and public health: Foundations of universal health systems10.1159/000370197 ↗
88. World Health Organization (2018). World Health Statistics 2018: Monitoring Health for the SDGs, Sustainable Development Goals, World Health Organization.
89. User acceptance of health information technology (HIT) in developing countries: A conceptual model10.1016/j.protcy.2014.10.145 ↗
90. Fielding, M., Odero, B., and Ochieng, C. (2016). From paper to data: Taking medical health records into the future. In Transforming Africa, 136. Available online: https://www.researchgate.net/profile/Matthew-Fielding/publication/314283699Frompapertodatatakingmedicalhealthrecordsintothefuture/links/59311142aca272fc55e72e85/From-paper-to-data-taking-medical-health-records-into-the-future.pdf.
91. Fortino, G., Badica, C., Malgeri, M., and Unland, R. (2012). Intelligent Distributed Computing VI: Proceedings of the 6th International Symposium on Intelligent Distributed Computing-IDC 2012, Calabria, Italy, September 2012, Springer.10.1007/978-3-642-32524-3 ↗
92. The impact of health information technology on patient safety10.15537/smj.2017.12.20631 ↗
93. Privacy and security in the era of digital health: What should translational researchers know and do about it?
94. Security and privacy of electronic health records: Concerns and challenges10.1016/j.eij.2020.07.003 ↗
95. Shirtawi, S., and Godla, S.R. (2022). Enhancing the Framework for E-Healthcare Privacy and Security: The Case of Addis Ababa. Innovative Data Communication Technologies and Application, Springer.10.1007/978-981-16-7167-8_36 ↗
96. Capece, G., and Lorenzi, F. (2020). Blockchain and Healthcare: Opportunities and Prospects for the EHR. Sustainability, 12.10.3390/su12229693 ↗
97. A blockchain-based healthcare platform for secure personalised data sharing
98. Mani, V., Manickam, P., Alotaibi, Y., Alghamdi, S., and Khalaf, O.I. (2021). Hyperledger healthchain: Patient-centric IPFS-based storage of health records. Electronics, 10.10.3390/electronics10233003 ↗
99. Common data elements and features of brucellosis health information management system10.1016/j.imu.2022.100953 ↗
100. Wu, J., Zhou, P., Chen, Q., Xu, Z., Ding, X., and Hao, J. (2021). Blockchain-based Privacy-Aware Contextual Online Learning for Collabrative Edge-Cloud-Enabled Nursing System in Internet of Things. IEEE Internet Things J., 1.