Self-Sovereign Identity for Consented and Content-Based Access to Medical Records using Blockchain

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Tcholakian, Marie, Gorna, Karolina, Laurent, Maryline, Ayed, Hella Kaffel Ben, Naghmouchi, Montassar
Format: Preprint
Published: 2024
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866913454074363904
author Tcholakian, Marie
Gorna, Karolina
Laurent, Maryline
Ayed, Hella Kaffel Ben
Naghmouchi, Montassar
author_facet Tcholakian, Marie
Gorna, Karolina
Laurent, Maryline
Ayed, Hella Kaffel Ben
Naghmouchi, Montassar
contents Electronic Health Records (EHRs) and Medical Data are classified as personal data in every privacy law, meaning that any related service that includes processing such data must come with full security, confidentiality, privacy and accountability. Solutions for health data management, as in storing it, sharing and processing it, are emerging quickly and were significantly boosted by the Covid-19 pandemic that created a need to move things online. EHRs makes a crucial part of digital identity data, and the same digital identity trends -- as in self sovereign identity powered by decentralized ledger technologies like Blockchain, are being researched or implemented in contexts managing digital interactions between health facilities, patients and health professionals. In this paper, we propose a blockchain-based solution enabling secure exchange of EHRs between different parties powered by a self-sovereign identity (SSI) wallet and decentralized identifiers. We also make use of a consortium IPFS network for off-chain storage and attribute-based encryption (ABE) to ensure data confidentiality and integrity. Through our solution, we grant users full control over their medical data, and enable them to securely share it in total confidentiality over secure communication channels between user wallets using encryption. We also use DIDs for better user privacy and limit any possible correlations or identification by using pairwise DIDs. Overall, combining this set of technologies guarantees secure exchange of EHRs, secure storage and management along with by-design features inherited from the technological stack.
format Preprint
id arxiv_https___arxiv_org_abs_2407_21559
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Self-Sovereign Identity for Consented and Content-Based Access to Medical Records using Blockchain
Tcholakian, Marie
Gorna, Karolina
Laurent, Maryline
Ayed, Hella Kaffel Ben
Naghmouchi, Montassar
Cryptography and Security
Emerging Technologies
Electronic Health Records (EHRs) and Medical Data are classified as personal data in every privacy law, meaning that any related service that includes processing such data must come with full security, confidentiality, privacy and accountability. Solutions for health data management, as in storing it, sharing and processing it, are emerging quickly and were significantly boosted by the Covid-19 pandemic that created a need to move things online. EHRs makes a crucial part of digital identity data, and the same digital identity trends -- as in self sovereign identity powered by decentralized ledger technologies like Blockchain, are being researched or implemented in contexts managing digital interactions between health facilities, patients and health professionals. In this paper, we propose a blockchain-based solution enabling secure exchange of EHRs between different parties powered by a self-sovereign identity (SSI) wallet and decentralized identifiers. We also make use of a consortium IPFS network for off-chain storage and attribute-based encryption (ABE) to ensure data confidentiality and integrity. Through our solution, we grant users full control over their medical data, and enable them to securely share it in total confidentiality over secure communication channels between user wallets using encryption. We also use DIDs for better user privacy and limit any possible correlations or identification by using pairwise DIDs. Overall, combining this set of technologies guarantees secure exchange of EHRs, secure storage and management along with by-design features inherited from the technological stack.
title Self-Sovereign Identity for Consented and Content-Based Access to Medical Records using Blockchain
topic Cryptography and Security
Emerging Technologies
url https://arxiv.org/abs/2407.21559