A Blockchain Framework for Patient-Centered Health Records and Exchange (HealthChain): Evaluation and Proof-of-Concept Study

被引:88
作者
Hylock, Ray Hales [1 ]
Zeng, Xiaoming [1 ]
机构
[1] East Carolina Univ, Coll Allied Hlth Sci, Dept Hlth Serv & Informat Management, 4340 Hlth Sci Bldg,Mail Stop 668, Greenville, NC 27858 USA
关键词
blockchain; chameleon hashing; health information exchange; health information management; HL7; FHIR; patient-centered health; medical records; proxy re-encryption; redactable blockchain; smart contracts; PROXY RE-ENCRYPTION; SECURE; SCHEME; TECHNOLOGIES; PLATFORM; SMART;
D O I
10.2196/13592
中图分类号
R19 [保健组织与事业(卫生事业管理)];
学科分类号
摘要
Background: Blockchain has the potential to disrupt the current modes of patient data access, accumulation, contribution, exchange, and control. Using interoperability standards, smart contracts, and cryptographic identities, patients can securely exchange data with providers and regulate access. The resulting comprehensive, longitudinal medical records can significantly improve the cost and quality of patient care for individuals and populations alike. Objective: This work presents HealthChain, a novel patient-centered blockchain framework. The intent is to bolster patient engagement, data curation, and regulated dissemination of accumulated information in a secure, interoperable environment. A mixed-block blockchain is proposed to support immutable logging and redactable patient blocks. Patient data are generated and exchanged through Health Level-7 Fast Healthcare Interoperability Resources, allowing seamless transfer with compliant systems. In addition, patients receive cryptographic identities in the form of public and private key pairs. Public keys are stored in the blockchain and are suitable for securing and verifying transactions. Furthermore, the envisaged system uses proxy re-encryption (PRE) to share information through revocable, smart contracts, ensuring the preservation of privacy and confidentiality. Finally, several PRE improvements are offered to enhance performance and security. Methods: The framework was formulated to address key barriers to blockchain adoption in health care, namely, information security, interoperability, data integrity, identity validation, and scalability. It supports 16 configurations through the manipulation of 4 modes. An open-source, proof-of-concept tool was developed to evaluate the performance of the novel patient block components and system configurations. To demonstrate the utility of the proposed framework and evaluate resource consumption, extensive testing was performed on each of the 16 configurations over a variety of scenarios involving a variable number of existing and imported records. Results: The results indicate several clear high-performing, low-bandwidth configurations, although they are not the strongest cryptographically. Of the strongest models, one's anticipated cumulative record size is shown to influence the selection. Although the most efficient algorithm is ultimately user specific, Advanced Encryption Standard-encrypted data with static keys, incremental server storage, and no additional server-side encryption are the fastest and least bandwidth intensive, whereas proxy re-encrypted data with dynamic keys, incremental server storage, and additional server-side encryption are the best performing of the strongest configurations. Conclusions: Blockchain is a potent and viable technology for patient-centered access to and exchange of health information. By integrating a structured, interoperable design with patient-accumulated and generated data shared through smart contracts into a universally accessible blockchain, HealthChain presents patients and providers with access to consistent and comprehensive medical records. Challenges addressed include data security, interoperability, block storage, and patient-administered data access, with several configurations emerging for further consideration regarding speed and security.
引用
收藏
页数:28
相关论文
共 115 条
[1]   If We Offer it, Will They Accept? Factors Affecting Patient Use Intentions of Personal Health Records and Secure Messaging [J].
Agarwal, Ritu ;
Anderson, Catherine ;
Zarate, Jesus ;
Ward, Claudine .
JOURNAL OF MEDICAL INTERNET RESEARCH, 2013, 15 (02)
[2]  
Al-Sahan A MSc (HI), 2016, Online J Public Health Inform, V8, pe205, DOI 10.5210/ojphi.v8i3.6845
[3]   A framework for searching encrypted databases [J].
Alves, Pedro G. M. R. ;
Aranha, Diego F. .
JOURNAL OF INTERNET SERVICES AND APPLICATIONS, 2018, 9 (01)
[4]  
[Anonymous], 2010, PROXY RE ENCRYPTION
[5]  
[Anonymous], 2017, Casper the friendly finality gadget
[6]  
[Anonymous], 2016, P 2 INT C OP BIG DAT
[7]  
[Anonymous], 2018, Blockchain in healthcare Today, DOI [10.30953/bhty.v1.10, DOI 10.30953/BHTY.V1.10]
[8]  
Aono Yoshinori, 2013, Progress in Cryptology - INDOCRYPT 2013. 14th International Conference on Cryptology in India. Proceedings: LNCS 8250, P1, DOI 10.1007/978-3-319-03515-4_1
[9]  
Ateniese G., 2006, ACM Transactions on Information and Systems Security, V9, P1, DOI 10.1145/1127345.1127346
[10]   Redactable Blockchain - or - Rewriting History in Bitcoin and Friends [J].
Ateniese, Giuseppe ;
Magri, Bernardo ;
Venturi, Daniele ;
Andrade, Ewerton R. .
2017 IEEE EUROPEAN SYMPOSIUM ON SECURITY AND PRIVACY (EUROS&P), 2017, :111-126