A personalized and efficient EMR sharing and management scheme based on smart contracts

Xiaohui Yang,Kun Zhang,Kai Jia,Peiyin Zhao
DOI: https://doi.org/10.1007/s12083-024-01669-z
IF: 3.488
2024-03-07
Peer-to-Peer Networking and Applications
Abstract:Sharing electronic medical record (EMR) is essential to dig out the value of medical data. Current data-sharing schemes usually rely on trusted third-party institutions. Patients lack control and tracking capabilities for sensitive individual medical data, and access control strategies lack personalization and autonomy, resulting in patients' reluctance to share EMR. Given the above problems, this paper proposes a blockchain-based patient-centered medical account chain to address the issues of existing EMR sharing schemes. The account chain establishes a personal smart contract account for the patient to allow patients to control and track sensitive medical data. This smart contract consists of two components: identity management and data management. Using the identity management contract, the patient can authorize and revoke access to their data. Data management contracts only allow authorized doctors to access and update the EMR. We use a hybrid encryption system, combining symmetric and asymmetric methods, to secure EMR, which often includes large files like medical images. This approach effectively tackles data privacy and security challenges, while improving encryption and decryption efficiency. The encrypted EMR is stored in the InterPlanetary File System (IPFS) cluster. Within the smart contract account, only the hash value from IPFS and the symmetric key encrypted with the patient's public key are retained. This approach minimizes storage costs on the blockchain while ensuring data coherence and integrity. During the sharing process, the proxy re-encryption algorithm reduces computational overhead on the patient's side while mitigating the risks associated with frequent exposure of the patient's private key. Through experiments and theoretical analysis on the Ethereum platform, the efficiency and superiority of the medical account chain in terms of functions, storage and computing costs are verified, and it is more suitable for modern medical scenarios.
computer science, information systems,telecommunications
What problem does this paper attempt to address?