Securing and Ensuring the Confidentiality of Medical Data in the Era of Decentralized Technologies: A Blockchain and Self-Sovereign Identity-Based Approach
摘要
In this work, we proposes a decentralized architecture integrating Ethereum blockchain, Role-Based Access Control (RBAC), and IPFS for secure data exchange, coupled with SSI for trust and autonomy in managing electronic health records (EHR). First, we propose a decentralized architecture that leverages Ethereum smart contracts and Self-Sovereign Identity (SSI) principles to establish a secure framework for data exchange, reinforced by Role-Based Access Control (RBAC) for privacy and confidentiality. Second, we focus on the Design System, presenting a detailed architecture for the decentralized healthcare framework. This includes generating Decentralized Identifiers (DIDs) from patients’ public keys, authenticating and authorizing stakeholders securely, and utilizing smart contracts to govern operations. Finally, we implement the system by deploying smart contracts on the Ethereum blockchain and integrating them with a decentralized web application (DApp). The DApp enables stakeholders to generate and manage DIDs, securely store and retrieve EHRs using InterPlanetary File System (IPFS), and interact with Verifiable Credentials (VCs) to ensure data authenticity and integrity.