Towards Secure and Privacy-Preserving Data Sharing in e-Health Systems via Consortium Blockchain
Towards Secure and Privacy-Preserving Data Sharing in e-Health Systems via Consortium Blockchain
复制标题
通过联盟区块链实现电子医疗系统中安全且保护隐私的数据共享
DOI：
10.1007/s10916-018-0995-5
复制
发表时间：
2018-08-01
影响因子：
5.3
通讯作者：
Lin, Xiaodong
中科院分区：
文献类型：
--
作者：
Zhang, Aiqing;Lin, Xiaodong
电子健康记录共享可以帮助提高诊断的准确性，其中安全和隐私保护是系统中的关键问题。近年来，区块链因其不变性的优势被认为是实现个人健康信息（PHI）共享的安全性和隐私保护的一种有前途的解决方案。这项工作提出了一个基于区块链的安全和隐私保护的PHI共享（BSPP）计划，用于改善电子医疗系统的诊断。首先，通过设计私有区块链和联盟区块链的数据结构和共识机制，构建了两种区块链。私有区块链负责存储PHI，而联盟区块链保存PHI的安全索引记录。为了实现数据安全、访问控制、隐私保护和安全搜索，所有数据（包括PHI、关键字和患者身份）都使用关键字搜索进行公钥加密。此外，区块生成器需要提供向区块链添加新区块的一致性证明，这保证了系统的可用性。安全性分析表明，该协议能够满足安全目标。最后，我们在JUICE上实现了该方案，并对其性能进行了评估。
Electronic health record sharing can help to improve the accuracy of diagnosis, where security and privacy preservation are critical issues in the systems. In recent years, blockchain has been proposed to be a promising solution to achieve personal health information (PHI) sharing with security and privacy preservation due to its advantages of immutability. This work proposes a blockchain-based secure and privacy-preserving PHI sharing (BSPP) scheme for diagnosis improvements in e-Health systems. Firstly, two kinds of blockchains, private blockchain and consortium blockchain, are constructed by devising their data structures, and consensus mechanisms. The private blockchain is responsible for storing the PHI while the consortium blockchain keeps records of the secure indexes of the PHI. In order to achieve data security, access control, privacy preservation and secure search, all the data including the PHI, keywords and the patients' identity are public key encrypted with keyword search. Furthermore, the block generators are required to provide proof of conformance for adding new blocks to the blockchains, which guarantees the system availability. Security analysis demonstrates that the proposed protocol can meet with the security goals. Furthermor, we implement the proposed scheme on JUICE to evaluate the performance.