MeDShare: Trust-Less Medical Data Sharing Among Cloud Service Providers via Blockchain

IEEE Access

Qi Xia¹  Jianbin Gao²  Xiaojiang Du³  Mohsen Guizani⁴  Kwame Omono Asamoah⁵  Emmanuel Boateng Sifah⁵ 

[1] Center for Cyber Security, University of Electronic Science and Technology of China, Chengdu, China;Center for Digital Health, School of Resource and Environment, University of Electronic Science and Technology of China, Chengdu, China;Department of Computer and Information Sciences, Temple University, Philadelphia, PA, USA;Electrical and Computer Engineering Department, University of Idaho, Moscow, ID, USA;School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China;

关键词: Access control;    blockchain;    cloud computing;    data sharing;    electronic medical records;    privacy;   

DOI  :  10.1109/ACCESS.2017.2730843

来源: DOAJ

【 摘 要 】

The dissemination of patients' medical records results in diverse risks to patients' privacy as malicious activities on these records cause severe damage to the reputation, finances, and so on of all parties related directly or indirectly to the data. Current methods to effectively manage and protect medical records have been proved to be insufficient. In this paper, we propose MeDShare, a system that addresses the issue of medical data sharing among medical big data custodians in a trust-less environment. The system is blockchain-based and provides data provenance, auditing, and control for shared medical data in cloud repositories among big data entities. MeDShare monitors entities that access data for malicious use from a data custodian system. In MeDShare, data transitions and sharing from one entity to the other, along with all actions performed on the MeDShare system, are recorded in a tamper-proof manner. The design employs smart contracts and an access control mechanism to effectively track the behavior of the data and revoke access to offending entities on detection of violation of permissions on data. The performance of MeDShare is comparable to current cutting edge solutions to data sharing among cloud service providers. By implementing MeDShare, cloud service providers and other data guardians will be able to achieve data provenance and auditing while sharing medical data with entities such as research and medical institutions with minimal risk to data privacy.

【 授权许可】

Unknown