Decentralized medical data sharing system with strong privacy controls
Decentralized Medical Data Sharing with Off-chain Storage and View-based Access Control
DatabasesCryptography and Security
Summary
Medical data sharing faces problems like security risks, high costs, and lack of flexibility with cloud storage. The authors propose VASCO, a system that stores medical data securely off the blockchain without relying on any central servers or special cloud storage. It uses strong encryption and access controls to keep data private and follow privacy laws. They show it works well with different data standards and tested it on a network of computers to prove it scales and works with various systems.
What this means in practice
- •For hospital data teams: Implement secure, privacy-compliant medical data sharing between multiple healthcare providers without relying on central servers or specialized cloud storage.
- •For cloud storage architects: Design interoperable cloud-based medical data storage that supports decentralized access control and end-to-end encryption across various data formats and standards.
Authors
Hajin Jeon, Hyung-Jin Yoon, Jemin Lee, Min-Soo Kim
Abstract
Recently, many blockchain-based medical data sharing systems using off-chain storage have been proposed. However, these systems have some drawbacks such as being incompletely decentralized, low adaptability to cloud storages, high cost, and low security. It is non-trivial to address the drawbacks due to the transparency, immutability, and decentralization of a blockchain platform. Our goal is to design a decentralized medical data sharing system with off-chain storage that addresses all the above drawbacks while satisfying data protection and privacy laws. We propose the VASCO (View-based AccesS COntrol) system that does not rely on any central server including a key generation one, not rely on any special cloud storage including IPFS, not use a secure channel, encrypts both data and metadata, and supports end-to-end encryption. We achieve it by designing eight chaincodes rigorously based on view-based access control. For a medical data ecosystem that consists of many stakeholders who employ different data standards, storage formats, and transmission protocols, we present how typical flows of medical data in the ecosystem can be achieved by using the proposed chaincodes with interoperability. We showed that VASCO is superior to the existing systems in terms of both functionality and regulatory compliance. We also tested the scalability of VASCO using a blockchain of 21 peer nodes with different specifications and verified interoperability through 30 combinations of standards, formats, and protocols. VASCO is a promising medical data sharing system that can provide secure and efficient sharing of medical data while preserving patient privacy and satisfying regulatory compliance with interoperability. The result of this study provides a potential to improve patient outcomes and advance medical research for the medical data ecosystem.