Abstract:The rapid development of wearable sensors and the 5G network empowers traditional medical treatment with the ability to collect patients’ information remotely for monitoring and diagnosing purposes. Meanwhile, the health-related mobile apps and devices also generate a large amount of medical data, which is critical for promoting disease research and diagnosis. However, medical data is too sensitive to share, which is also a common issue for IoT (Internet of Things) data. The traditional centralized cloud-based medical data sharing schemes have to rely on a single trusted third party. Therefore, the schemes suffer from single-point failure and lack of privacy protection and access control for the data. Blockchain is an emerging technique to provide an approach for managing data in a decentralized manner. Especially, the blockchain-based smart contract technique enables the programmability for participants to access the data. All the interactions are authenticated and recorded by the other participants of the blockchain network, which is tamper resistant. In this paper, we leverage the K-anonymity and searchable encryption techniques and propose a blockchain-based privacy-preserving scheme for medical data sharing among medical institutions and data users. To be specific, the consortium blockchain, Hyperledger Fabric, is adopted to allow data users to search for encrypted medical data records. The smart contract, i.e., the chaincode, implements the attribute-based access control mechanisms to guarantee that the data can only be accessed by the user with proper attributes. The K-anonymity and searchable encryption ensure that the medical data is shared without privacy leaking, i.e., figuring out an individual patient from queries. We implement a prototype system using the chaincode of Hyperledger Fabric. From the functional perspective, security analysis shows that the proposed scheme satisfies security goals and precedes others. From the performance perspective, we conduct experiments by simulating different numbers of medical institutions. The experimental results demonstrate that the scalability and performance of our scheme are practical.

Permissioned Blockchain-based Secure and Privacy-Preserving Data Sharing Protocol

Enhancing privacy in cyber-physical systems: An efficient blockchain-assisted data-sharing scheme with deniability

Blockchain-based Privacy-preserving and Rewarding Private Data Sharing for IoT

Scalable and Privacy-Preserving Data Sharing Based on Blockchain

A Blockchain-Based Privacy Preserving Intellectual Property Authentication Method

Using Secure Multi-Party Computation to Protect Privacy on a Permissioned Blockchain

A Blockchain-Based Medical Data Sharing Mechanism with Attribute-Based Access Control and Privacy Protection

A Privacy-Preserving Medical Data Sharing Scheme Based on Blockchain

A blockchain-based scheme for privacy-preserving and secure sharing of medical data

Privacy Preservation for On-Chain Data in the Permission less Blockchain using Symmetric Key Encryption and Smart Contract

Enhancing Security and Flexibility in the Industrial Internet of Things: Blockchain-Based Data Sharing and Privacy Protection

PDPChain: A Consortium Blockchain-Based Privacy Protection Scheme for Personal Data

A Challenge-Response Assisted Authorisation Scheme for Data Access in Permissioned Blockchains

A blind batch encryption and public ledger-based protocol for sharing sensitive data

A data privacy protection scheme for Internet of things based on blockchain

Blockchain-Based Anonymous Data Sharing with Accountability for Internet of Things

FACOS: Enabling Privacy Protection Through Fine-Grained Access Control With On-Chain and Off-Chain System

A Permissioned Blockchain System for Secure Multiparty Computation

Blockchain-Based Privacy-Preserving Public Auditing for Group Shared Data

An Efficient Permissioned Blockchain with Provable Reputation Mechanism

Blockchain-enabled Data Governance for Privacy-Preserved Sharing of Confidential Data