Blockchain-assisted sharing of electronic health records: a feasible privacy-centric constant-size ring signature framework

AbstractThe quest to share Electronic Heath Records (EHR) with blockchain as a core technology has witnessed a myriad of frameworks ingrained with diverse cryptographic primitives as well as non-cryptographic mechanisms. Existing works, however, still suffer from privacy-related challenges chief being privacy breaches based on blockchain digital footprints from health facilities, doctors, and patients alike as well as feasibility challenges. Empirical research from state-of-the-art demonstrates the possibility to deanonymize entities involved in a blockchain transaction via inference analysis using such digital footprints on-chain. In this paper, we address such lacunae by advancing a privacy-conscious feasible blockchain-agnostic EHR sharing framework leveraging anonymous transactions, a smart contract, and decentralized storage technology. We construct a constant-size identity-based ring signature to provide accentuated privacy for transaction initiators and demonstrate how health facilities can anonymously retrieve anonymous data on-chain to facilitate EHR sharing via a novel, robust yet computationally efficient, and privacy-aware algorithm dubbed PatientFinder. We subsequently show proof of concept of our framework. A thorough system evaluation is performed revealing that the solution satisfies the privacy of patients and health facilities (doctors), feasibility, and security-related requirements.Keywords: Blockchainelectronic health recordsprivacyring signaturesecuritysharing Disclosure statementNo potential conflict of interest was reported by the author(s).Additional informationFundingThis work was supported by National Natural Science Foundation of China (Youth), Image Source Forensics Security Research (Grant No. 61702429) and Sichuan Provincial Department of Science and Technology, A trusted basic service platform for universities based on independent and controllable blockchain technology (Grant No. 2021YFG0311)Notes on contributorsJustice OdoomJustice Odoom received his BSc and MSE degrees in computer science from Data Link University, Tema, Ghana, and Southwest University of Science and Technology, Mianyang, China, in 2015 and 2020 respectively. He received the PhD degree from the Southwest University of Science and Technology, China, in 2023 and is a certified Elsevier and Publons academy peer reviewer. His research interests include information security, blockchain technology, ring signatures and privacy-preservation in the sharing of Electronic Health Records (EHRs). He is a member of IEEE and IEEE Computer Society.Xiaofang HuangXiaofang Huang received the PhD degree from the Beijing University of Posts and Telecommunications in 2010. She is currently a professor with the School of Computer Science and Technology, Southwest University of Science and Technology, Mianyang, China. Her main research interests include information security, cloud computing, and blockchain technology. She got the information security leading talent award of the district level in 2015.Zuhong ZhouZuhong Zhou born in 1966, Chief Information Officer in the Mianyang Central Hospital. His main research interests include computer software system development, information construction of hospital and in charge of hospital's comprehensive work. He participated in the editing of 2 monographs and he has published 5 theses as the first author, and he also published more than 20 conferences exchange theses about the conferences above the provincial level, of which 3 of them won the National Society Outstanding Paper Award, 1 out of them won the provincial first prize.Samuel DansoSamuel Danso obtained his first degree in computer science in Ghana and Master's degree in Telecom Technology at SMU-India in the year 2012. He is a full-time lecturer, Ghana Communication Technology University-Ghana and obtained the PhD degree from Southwest University of Science and Technology Mianyang-China in the year 2022. His area of research interests include terahertz active imaging and security on-line, data communications, system, and network security.Benedicta Nana Esi NyarkoBenedicta Nana Esi Nyarko obtained her BSc information and communication technology from Data Link University, Tema Ghana and MEng information and communication engineering, from Southwest University of Science and Technology, Mianyang China. She is currently a doctoral candidate in control science and engineering at Southwest University of Science and Technology, Mianyang China. Her research includes machine learning and pattern recognition.Jinan ZhengJinan Zheng received the Master's degree from the School of Computer Science and Technology, Southwest University of Science and Technology Mianyang China in 2023. His current research interests include blockchain technology, cryptography, and ring signatures.Yanjie XiangYanjie Xiang received the Master's degree from the School of Computer Science and Technology, Southwest University of Science and Technology Mianyang China in 2023. Her current research interests include blockchain technology, cryptography and encryption techniques.