Abstract:Blockchain technology provides a tremendous opportunity to transform current personal health record (PHR) systems into a decentralised network infrastructure. However, such technology possesses some drawbacks, such as issues in privacy and storage capacity. Given its transparency and decentralised features, medical data are visible to everyone on the network and are inappropriate for certain medical applications. By contrast, storing vast medical data, such as patient medical history, laboratory tests, X-rays, and MRIs, significantly affect the repository storage of blockchain. This study bridges the gap between PHRs and blockchain technology by offloading the vast medical data into the InterPlanetary File System (IPFS) storage and establishing an enforced cryptographic authorisation and access control scheme for outsourced encrypted medical data. The access control scheme is constructed on the basis of the new lightweight cryptographic concept named smart contract-based attribute-based searchable encryption (SC-ABSE). This newly cryptographic primitive is developed by extending ciphertext-policy attribute-based encryption (CP-ABE) and searchable symmetric encryption (SSE) and by leveraging the technology of smart contracts to achieve the following: (1) efficient and secure fine-grained access control of outsourced encrypted data, (2) confidentiality of data by eliminating trusted private key generators, and (3) multikeyword searchable mechanism. Based on decisional bilinear Diffie-Hellman hardness assumptions (DBDH) and discrete logarithm (DL) problems, the rigorous security indistinguishability analysis indicates that SC-ABSE is secure against the chosen-keyword attack (CKA) and keyword secrecy (KS) in the standard model. In addition, user collusion attacks are prevented, and the tamper-proof resistance of data is ensured. Furthermore, security validation is verified by simulating a formal verification scenario using Automated Validation of Internet Security Protocols and Applications (AVISPA), thereby unveiling that SC-ABSE is resistant to man-in-the-middle (MIM) and replay attacks. The experimental analysis utilised real-world datasets to demonstrate the efficiency and utility of SC-ABSE in terms of computation overhead, storage cost and communication overhead. The proposed scheme is also designed and developed to evaluate throughput and latency transactions using a standard benchmark tool known as Caliper. Lastly, simulation results show that SC-ABSE has high throughput and low latency, with an ultimate increase in network life compared with traditional healthcare systems.

Patient-centered Cross-Enterprise Document Sharing and Dynamic Consent Framework Using Consortium Blockchain and Ciphertext-Policy Attribute-Based Encryption

Flexible and secure access control for EHR sharing based on blockchain

Patients-Controlled Secure and Privacy-Preserving EHRs Sharing Scheme Based on Consortium Blockchain.

MC-DSC: A Dynamic Secure Resource Configuration Scheme based on Medical Consortium Blockchain

A Blockchain and CP-ABE Based Access Control Scheme with Fine-Grained Revocation of Attributes in Cloud Health

Blockchain-enabled Data Governance for Privacy-Preserved Sharing of Confidential Data

A Privacy-Preserving Medical Data Sharing Scheme Based on Blockchain

A robust algorithm for authenticated health data access via blockchain and cloud computing

A Trusted Medical Data Sharing Framework for Edge Computing Leveraging Blockchain and Outsourced Computation

Blockchain-Based Access Control Scheme for Secure Shared Personal Health Records over Decentralised Storage

Electronic Health Records Sharing Based on Consortium Blockchain

Lightweight multi-departmental data sharing scheme based on consortium blockchain

Patient-centric medical service matching with fine-grained access control and dynamic user management

Secure Decentralized Attribute-Based Sharing of Personal Health Records with Blockchain

A blockchain-based privacy-preserving and access-control framework for electronic health records management

A blockchain-based scheme for privacy-preserving and secure sharing of medical data

PDPChain: A Consortium Blockchain-Based Privacy Protection Scheme for Personal Data

An Efficient Ciphertext-Policy Attribute-Based Encryption Scheme Supporting Collaborative Decryption With Blockchain

A Blockchain-Based Medical Data Sharing Mechanism with Attribute-Based Access Control and Privacy Protection

MDS2-C3PF: A Medical Data Sharing Scheme with Cloud-Chain Cooperation and Policy Fusion in IoT

A Controllable Secure Blockchain-Based Electronic Healthcare Records Sharing Scheme