A Blockchain Based Decentralized Identifiers for Entity Authentication in Electronic Health Records
A Blockchain Based Decentralized Identifiers for Entity Authentication in Electronic Health Records
复制标题
DOI：
10.1080/23311916.2022.2035134
复制
发表时间：
2022-12-31
影响因子：
1.9
通讯作者：
Narendra, V. G.
中科院分区：
文献类型：
--
作者：
Manoj, T.;Makkithaya, Krishnamoorthi;Narendra, V. G.
在过去的二十年里，医疗保健生态系统的数字化步伐迅速，导致地球仪上电子健康记录（EHR）的创建、存储和共享出现了惊人的增长。然而，用于证明EHR中的实体的身份的认证机制基于由集中式身份提供者（IDP）发布的标识符。它可能导致单点故障、隐私损失和缺乏互操作性。由区块链建模的去中心化标识符（DID）和可验证凭据（VC）数据的新浪潮使得以去中心化的方式实现实体认证成为可能。在这项研究中，提出了一个基于区块链的框架，该框架具有分散的标识符，用于使用可验证的凭证进行EHR访问的患者身份验证和同意管理。它描述了DID生成和身份验证凭证设置的过程，沿着EHR生态系统中颁发和验证凭证的工作流。该框架使用Hyperledger Indy区块链和Aries库实现。该研究从可扩展性、效率、资源利用率和安全性等方面评估了拟议工作流的性能。具体而言，本研究的结果可以用来实现分散的身份管理和认证的EHR系统。
Over the past two decades, the fast pace of digitization in the healthcare ecosystem led to a phenomenal rise in the creation, storage and sharing of Electronic Health Records (EHRs) across the globe. However, the mechanism of authentication used for proving the identity of entities in EHRs is based on the identifiers issued by centralized identity providers (IDPs). It may lead to a single point of failure, loss of privacy and lack of interoperability. A new wave of decentralized identifiers (DIDs) and verifiable credentials(VCs) data modelled by blockchain has made it possible to achieve entity authentication in a decentralized manner. In this study, a blockchain-based framework with decentralized identifiers for patient authentication and consent management for EHR access using verifiable credentials is proposed. It describes the process of DID generation and authentication credential setup along with workflows for issuing and verifying credentials in the EHR ecosystem. The framework is implemented using Hyperledger Indy blockchain and Aries library. The study evaluates the performance of proposed workflows in terms of scalability, efficiency, resource utilization and conducts security analysis. Specifically, the outcome of this study can be used to realize the decentralized identity management and authentication in EHR systems.