Abstract:Blockchain technology provides a tremendous opportunity to transform current personal health record (PHR) systems into a decentralised network infrastructure. However, such technology possesses some drawbacks, such as issues in privacy and storage capacity. Given its transparency and decentralised features, medical data are visible to everyone on the network and are inappropriate for certain medical applications. By contrast, storing vast medical data, such as patient medical history, laboratory tests, X-rays, and MRIs, significantly affect the repository storage of blockchain. This study bridges the gap between PHRs and blockchain technology by offloading the vast medical data into the InterPlanetary File System (IPFS) storage and establishing an enforced cryptographic authorisation and access control scheme for outsourced encrypted medical data. The access control scheme is constructed on the basis of the new lightweight cryptographic concept named smart contract-based attribute-based searchable encryption (SC-ABSE). This newly cryptographic primitive is developed by extending ciphertext-policy attribute-based encryption (CP-ABE) and searchable symmetric encryption (SSE) and by leveraging the technology of smart contracts to achieve the following: (1) efficient and secure fine-grained access control of outsourced encrypted data, (2) confidentiality of data by eliminating trusted private key generators, and (3) multikeyword searchable mechanism. Based on decisional bilinear Diffie-Hellman hardness assumptions (DBDH) and discrete logarithm (DL) problems, the rigorous security indistinguishability analysis indicates that SC-ABSE is secure against the chosen-keyword attack (CKA) and keyword secrecy (KS) in the standard model. In addition, user collusion attacks are prevented, and the tamper-proof resistance of data is ensured. Furthermore, security validation is verified by simulating a formal verification scenario using Automated Validation of Internet Security Protocols and Applications (AVISPA), thereby unveiling that SC-ABSE is resistant to man-in-the-middle (MIM) and replay attacks. The experimental analysis utilised real-world datasets to demonstrate the efficiency and utility of SC-ABSE in terms of computation overhead, storage cost and communication overhead. The proposed scheme is also designed and developed to evaluate throughput and latency transactions using a standard benchmark tool known as Caliper. Lastly, simulation results show that SC-ABSE has high throughput and low latency, with an ultimate increase in network life compared with traditional healthcare systems.

Identity-based searchable attribute signcryption in lattice for a blockchain-based medical system

A Fully Secure Lattice-Based Signcryption with Designated Equality Test in Standard Model

A Lattice-Based Anonymous Authentication for Privacy Protection of Medical Data

Electronic Health Record Sharing Scheme With Searchable Attribute-Based Encryption on Blockchain

A blockchain based secure and privacy aware medical data sharing using smart contract and encryption scheme

Blockchain-Based Access Control Scheme for Secure Shared Personal Health Records over Decentralised Storage

A blockchain-based framework for electronic medical records sharing with fine-grained access control

Attribute-based searchable encryption with decentralized key management for healthcare data sharing

A blockchain-based hybrid encryption technique with anti-quantum signature for securing electronic health records

Designing a Block Chain Based Network for the Secure Exchange of Medical Data in Healthcare Systems

Attribute-Based Signcryption from Lattices in the Standard Model

A Decentralizing Attribute-Based Signature for Healthcare Blockchain

Identity-Based Signcryption from Lattices

Attribute-Based Searchable Encryption Scheme in Smart Healthcare Blockchain

Flexible and secure access control for EHR sharing based on blockchain

Identity-Based Encryption with Disjunctive, Conjunctive and Range Keyword Search from Lattices

Blockchain-based healthcare management system with two-side verifiability

BA-RMKABSE: Blockchain-aided Ranked Multi-keyword Attribute-based Searchable Encryption with Hiding Policy for Smart Health System

An Inner Product Predicate-Based Medical Data-Sharing and Privacy Protection System