Blockchain for Giving Patients Control over their Medical Records
preprintposted on 2020-09-03, 11:12 authored by Mohammad Madine, Ammar Battah, Ibrar YaqoobIbrar Yaqoob, Khaled Salah, Raja JayaramanRaja Jayaraman, Yousof Al-Hammadi, Sasa Pesic, Samer Ellahham
Personal health records (PHRs) are valuable assets to individuals because they enable them to integrate and manage their medical data. A PHR is an electronic application through which patients can manage their health information. Giving patients control over their medical data offers an advantageous realignment of the doctor-patient dynamic. However, today's PHR management systems fall short of giving reliable, traceable, trustful, and secure patients control over their medical data, which poses serious threats to their authenticity and accuracy. Moreover, most of the current approaches and systems leveraged for managing PHR are centralized that not only make medical data sharing difficult but also poses a risk of single point of failure problem. In this paper, we propose Ethereum blockchain-based smart contracts to give patients control over their data in a manner that is decentralized, immutable, transparent, traceable, trustful, and secure. The proposed system employs decentralized storage of interplanetary file systems (IPFS), proxy re-encryption, and trusted reputation-based oracles to securely fetch, store, and share patients' medical data. We present algorithms along with their full implementation details. We evaluate the proposed smart contracts using two important performance metrics, such as cost and correctness. Furthermore, we provide security analysis and discuss the generalization aspects of our solution. We outline the limitations of the proposed approach. We make the smart contract source code publicly available on Github.
This publication is based upon work supported by the Khalifa University of Science and Technology under Award No. CIRA-2019-001.
Email Address of Submitting Authoribraryaqoob@ieee.org
ORCID of Submitting Author0000-0002-8438-3429
Submitting Author's InstitutionKhalifa University of Science and Technology
Submitting Author's CountryUnited Arab Emirates
Read the peer-reviewed publication
in IEEE Access