<p>The expansion of Digital Health brings increasing data privacy and security challenges, mainly due to data collection by service providers and third parties. The decentralized approach of Self-Sovereign Identity emerges as a solution, offering users direct control over their data. This paper proposes the SmartMed system for controlling access to private medical data by attribute-based access control implemented on smart contracts. The paper investigates the performance limitations of the Ethereum, Besu, and Hyperledger Fabric blockchain platforms in controlling access to medical data. The proposal develops smart contracts to perform attribute-based access control and to store log records on the blockchain, highlighting the detailed performance analysis on both tested platforms. The results reveal the superiority of the Hyperledger Fabric platform over Ethereum and Besu, indicating a higher transaction throughput. Our proposal innovates by proposing a system based on smart contracts to guarantee the authenticity of medical data, complemented by the use of Keycloak in managing access to healthcare systems.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Decentralized security in blockchain-based digital health systems: self-sovereign identity, access control, and auditing with smart contracts

  • Yago de R. dos Santos,
  • Nicollas R. de Oliveira,
  • Guilherme N. N. Barbosa,
  • Lucio Henrik A. Reis,
  • Ana Carolina R. Mendes,
  • Marcela T. de Oliveira,
  • Dianne S. V. de Medeiros,
  • Diogo M. F. Mattos

摘要

The expansion of Digital Health brings increasing data privacy and security challenges, mainly due to data collection by service providers and third parties. The decentralized approach of Self-Sovereign Identity emerges as a solution, offering users direct control over their data. This paper proposes the SmartMed system for controlling access to private medical data by attribute-based access control implemented on smart contracts. The paper investigates the performance limitations of the Ethereum, Besu, and Hyperledger Fabric blockchain platforms in controlling access to medical data. The proposal develops smart contracts to perform attribute-based access control and to store log records on the blockchain, highlighting the detailed performance analysis on both tested platforms. The results reveal the superiority of the Hyperledger Fabric platform over Ethereum and Besu, indicating a higher transaction throughput. Our proposal innovates by proposing a system based on smart contracts to guarantee the authenticity of medical data, complemented by the use of Keycloak in managing access to healthcare systems.