Blockchain-Based Access Control for Electronic Health Records

Blockchain-based access control mechanisms have the potential to significantly enhance the security and privacy of electronic health record systems. Electronic health data, vital for diagnosis, treatment, recovery, and medical accident investigation, must be protected to ensure its integrity and availability. This requires preserving the accuracy, reliability, and accessibility of this critical information within the healthcare ecosystem. Blockchain technology offers substantial potential for authenticating and preserving the integrity of access to electronic health data. In this paper, we propose a blockchain-based access control framework for electronic health record systems. This framework allows individuals to manage their digital identities in accordance with Self-Sovereign Identity (SSI) principles. It uses attribute-based access control (ABAC) to safeguard the privacy and security of electronic health data. The framework is designed to protect electronic health data during user access and employs Hyperledger Indy and Hyperledger Aries for sovereignty, with the Open Policy Agent (OPA) utilized for access control.