Blockchain-based Access Control Strategy And Its Application In Electronic Medical Records

The electronic medical records have the advantages of large storage capacity,convenient query,resource saving and work efficiency.So it gradually replaces the traditional paper medical records.The widespread use of electronic medical records has greatly facilitated patients and medical institutions,but electronic medical records often contain a large number of patients' private information.Once these private information is disclosed,it will not only brings the risk of property loss,but also causes physical and mental harm to the party.In addition to the secure storage of medical data,data management issues are equally worthy of attention.How to ensure that patients can truly own data ownership,how to ensure the authenticity and integrity of data,has become one of the current hot research issues.As a distributed ledger,blockchain technology has the characteristics of non-tamperable,traceable,and publicly verifiable.It provides a new solution to solve the above problems,and the application of blockchain technology in the medical field is also one of the current hot research directions.Therefore,for the above problems,the main work of this paper is as follows:(1)In view of the lack of data management rights for patients,this paper proposes an EMRs access control scheme based on blockchain.The scheme takes advantage of the nontamperable,traceable and open characteristics of blockchain technology.And it uses identity-based encryption to implement role-based access control.It also stores the access control strategy developed by the patient in the blockchain to achieve data management rights and ensure the authenticity and integrity of the data.The solution uses smart contracts to verify the access strategy without third-party nodes.All users' operations on patients' electronic medical records and addition records will be published to the blockchain to achieve traceability of electronic medical records and user operations.(2)For the existing schemes,patients cannot authorize medical staff in a timely manner in emergency situations.So medical staff cannot obtain electronic medical records and may miss the best treatment time.This paper proposes a blockchain-based break-glass electronic medical records access control scheme based on(1).By pre-setting emergency contacts and sharing passwords of patients,emergency contacts can use passwords to recover emergency access key to obtain break-glass access to electronic medical records in emergency situations.Same as(1),all operations on electronic medical records in this scheme will be published to the blockchain,so they are also traceable.