A robust algorithm for authenticated health data access via blockchain and cloud computing

• Published in: PloS one 2024-09, Vol.19 (9), p.e0307039
• Main Authors: Shahzad, Ali, Chen, Wenyu, Shaheen, Momina, Zhang, Yin, Ahmad, Faizan
• Format: Article
• Language: English
• Subjects: Access control; Algorithms; Analysis; Authentication; Blockchain; Cloud Computing; Computer and Information Sciences; Computer Security; Confidentiality; Contracts; Cybersecurity; Data encryption chips; Data exchange; Data integrity; Data logging; Data security; Electronic Health Records; Electronic medical records; Electronic records; Encryption; Health aspects; Health care; Health care industry; Health care reform; Health services; Humans; Investment analysis; Medical records; Medicine and Health Sciences; Physical Sciences; Privacy; Research and Analysis Methods; Resource allocation; Safety and security measures; Telemedicine
• ISSN: 1932-6203; 1932-6203
• DOI: 10.1371/journal.pone.0307039

In modern healthcare, providers increasingly use cloud services to store and share electronic medical records. However, traditional cloud hosting, which depends on intermediaries, poses risks to privacy and security, including inadequate control over access, data auditing, and tracking data origins. Additionally, current schemes face significant limitations such as scalability concerns, high computational overhead, practical implementation challenges, and issues with interoperability and data standardization. Unauthorized data access by cloud providers further exacerbates these concerns. Blockchain technology, known for its secure and decentralized nature, offers a solution by enabling secure data auditing in sharing systems. This research integrates blockchain into healthcare for efficient record management. We proposed a blockchain-based method for secure EHR management and integrated Ciphertext-Policy Attribute-Based Encryption (CP-ABE) for fine-grained access control. The proposed algorithm combines blockchain and smart contracts with a cloud-based healthcare Service Management System (SMS) to ensure secure and accessible EHRs. Smart contracts automate key management, encryption, and decryption processes, enhancing data security and integrity. The blockchain ledger authenticates data transactions, while the cloud provides scalability. The SMS manages access requests, enhancing resource allocation and response times. A dual authentication system confirms patient keys before granting data access, with failed attempts leading to access revocation and incident logging. Our analyses show that this algorithm significantly improves the security and efficiency of health data exchanges. By combining blockchain's decentralized structure with the cloud's scalability, this approach significantly improves EHR security protocols in modern healthcare setting.