Application of Blockchain to Maintaining Patient Records in Electronic Health Record for Enhanced Privacy, Scalability, and Availability
1
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
Objectives: Electronic Health Record (EHR) systems are increasingly used as an effective method to share patients’ records among different hospitals. However, it is still a challenge to access scattered patient data through multiple EHRs. Our goal is to build a system to access patient records easily among EHRs without relying on a centralized supervisory system. Methods: We apply consortium blockchain to compose a distributed system using Hyperledger Fabric incorporating existent EHRs. Peer nodes hold the same ledger on which the address of a patient record in an EHR is written. Individual patients are identified by unique certificates issued by a local certificate authorities that collaborate with each other in a channel of the network. To protect a patient’s privacy, we use a proxy re-encryption scheme when the data are transferred. We designed and implemented various chaincodes to handle business logic agreed by member organizations of the network. Results: We developed a prototype system to implement our concept and tested its performance including chaincode logic. The results demonstrated that our system can be used by doctors to find patient’s records and verify patient’s consent on access to the data. Patients also can seamlessly receive their past records from other hospitals. The access log is stored transparently and immutably in the ledger that is used for auditing purpose. Conclusions: Our system is feasible and flexible with scalability and availability in adapting to existing EHRs for strengthening security and privacy in managing patient records. Our research is expected to provide an effective method to integrate dispersed patient records among medical institutions.
Abstract
Objectives: Electronic Health Record (EHR) systems are increasingly used as an effective method to share patients’ records among different hospitals. However, it is still a challenge to access scattered patient data through multiple EHRs. Our goal is to build a system to access patient records easily among EHRs without relying on a centralized supervisory system. Methods: We apply consortium blockchain to compose a distributed system using Hyperledger Fabric incorporating existent EHRs. Peer nodes hold the same ledger on which the address of a patient record in an EHR is written. Individual patients are identified by unique certificates issued by a local certificate authorities that collaborate with each other in a channel of the network. To protect a patient’s privacy, we use a proxy re-encryption scheme when the data are transferred. We designed and implemented various chaincodes to handle business logic agreed by member organizations of the network. Results: We developed a prototype system to implement our concept and tested its performance including chaincode logic. The results demonstrated that our system can be used by doctors to find patient’s records and verify patient’s consent on access to the data. Patients also can seamlessly receive their past records from other hospitals. The access log is stored transparently and immutably in the ledger that is used for auditing purpose. Conclusions: Our system is feasible and flexible with scalability and availability in adapting to existing EHRs for strengthening security and privacy in managing patient records. Our research is expected to provide an effective method to integrate dispersed patient records among medical institutions.
참고문헌 (25)
- Greenhalgh T, "Adoption, non-adoption, and abandonment of a personal electronic health record : case study of Health-Space", BMJ, 341, pp.c5814~ (2010)
- Pylypchuk Y, "Variation in Interoperability among US non-federal acute care hospitals in 2017", ONC Data Brief, (42), pp.1~15 (2018)
- "About CommonWell" (2020)[URL]
- "Use cases and specifications" (2020)[URL]
- van der Linden H, "Interorganizational future proof EHR systems : a review of the security and privacy related issues", Int J Med Inform, 78(3), pp.141~160 (2009)
- "A Pandora’s Box: the EMR’s audit trail" (2017)[URL]
- Walsh T, "Privacy and security audits of electronic health information", J AHIMA, 85(3), pp.54~59 (2014)
- "HIPAA compliance guide" (2017)[URL]
- Xu X, "A taxonomy of blockchain-based systems for architecture design", Proceedings of 2017 IEEE International Conference on Software Architecture (ICSA), pp.243~252 (2017)
- Sousa J, "A byzantine fault-tolerant ordering service for the hyperledger fabric blockchain platform", Proceedings of the 48th Annual IEEE, 2018, 51~58
- Androulaki E, "Hyperledger fabric: a distributed operating system for permissioned blockchains", Proceedings of the 13th EuroSys Conference (2018)
- "What is a blockchain" (2019)[URL]
- Dagher GG, "Ancile : privacy-preserving framework for access control and interoperability of electronic health records using blockchain technology", Sustain Cities Soc, 39, pp.283~297 (2018)
- Roehrs A, "OmniPHR : a distributed architecture model to integrate personal health records", J Biomed Inform, 71, pp.70~81 (2017)
- Kuo TT, "Blockchain distributed ledger technologies for biomedical and health care applications", J Am Med Inform Assoc, 24(6), pp.1211~1220 (2017)
- Manzoor A, "Blockchain based proxy re-encryption scheme for secure IoT data sharing", Proceedings of 2019 IEEE International Conference on Blockchain and Cryptocurrency (ICBC), pp.99~103 (2019)
- Thakkar P, "Performance benchmarking and optimizing hyperledger fabric blockchain platform", Proceedings of IEEE 26th International Symposium on Modeling, Analysis, and Simulation of Computer and Telecommunication Systems (MASCOTS), pp.264~276 (2018)
- Wang S, "Blockchain-enabled smart contracts : architecture, applications, and future trends", IEEE Trans Syst Man Cybern Syst, 49(11), pp.2266~2277 (2019)
- Preneel B, "Progress in cryptology – INDOCRYPT 2010", pp.115~117 (2010), Springer
- Thangam V, "Elliptic curve based proxy re-encryption", Proceedings of the 2nd International Conference on Information and Communication Technology for Competitive Strategies (ICTCS), pp.1~6 (2016)
- Chow SS, "Progress in cryptology – AFRICACRYPT 2010", pp.316~332 (2010), Springer
- Ateniese G, "Improved proxy re-encryption schemes with applications to secure distributed storage", ACM Trans Inf Syst Secur, 9(1), pp.1~30 (2006)
- Azaria A, "Medrec: using blockchain for medical data access and permission management", Proceedings of the 2nd International Conference on Open and Big Data (OBD), pp.25~30 (2016)
- "MIT Media Lab" (2019)[URL]
- Dubovitskaya A, "Secure and trustable electronic medical records sharing using Blockchain", AMIA Annu Symp Proc, 2017, pp.650~659 (2018)