Visible to the public Access Control for Electronic Health Records with Hybrid Blockchain-Edge Architecture

TitleAccess Control for Electronic Health Records with Hybrid Blockchain-Edge Architecture
Publication TypeConference Paper
Year of Publication2019
AuthorsGuo, Hao, Li, Wanxin, Nejad, Mark, Shen, Chien-Chung
Conference Name2019 IEEE International Conference on Blockchain (Blockchain)
Date Publishedjul
KeywordsAccess Control, Access Control List, access control policies, attribute-based access control, authorisation, blockchain, blockchain security, blockchain-based access control logs, blockchain-based controller, Computer architecture, data privacy, Distributed databases, distributed ledger, edge computing, EHR data management, EHR privacy, Fabrics, global electronic health record market, Health Care, hybrid architecture, hybrid blockchain-edge architecture, hyperledger, hyperledger composer fabric blockchain, medical information systems, Medical services, off-chain edge nodes, pubcrawl, Resiliency, Scalability, smart contract, smart contracts, transaction processing
AbstractThe global Electronic Health Record (EHR) market is growing dramatically and expected to reach \$39.7 billions by 2022. To safe-guard security and privacy of EHR, access control is an essential mechanism for managing EHR data. This paper proposes a hybrid architecture to facilitate access control of EHR data by using both blockchain and edge node. Within the architecture, a blockchain-based controller manages identity and access control policies and serves as a tamper-proof log of access events. In addition, off-chain edge nodes store the EHR data and apply policies specified in Abbreviated Language For Authorization (ALFA) to enforce attribute-based access control on EHR data in collaboration with the blockchain-based access control logs. We evaluate the proposed hybrid architecture by utilizing Hyperledger Composer Fabric blockchain to measure the performance of executing smart contracts and ACL policies in terms of transaction processing time and response time against unauthorized data retrieval.
DOI10.1109/Blockchain.2019.00015
Citation Keyguo_access_2019