e-DRBAC-HC: Extended Decentralized Role-Based Access Control for Healthcare System using Blockchain
Keywords:
Internet of Things, Role-Based Access Control, Healthcare System, Blockchain Technology, SecurityAbstract
Recent advancements in the Internet of Things have made a significant impact on health informatics. Healthcare services are increasingly incorporating information and communications technology (ICT) as a response to the rising volume of patient data. This surge in data has prompted a shift from traditional methods of storing patient records in physical files to digital alternatives, with Electronic Health Records (EHRs) leading the way. However, Patient tamper-proof data, storage and retrieval of health records, and avoidance of the centralized record-keeping mechanism are crucial requirements in any healthcare system. Blockchain, being a distributed ledger technology, offers a secure and transparent way to store every record within the healthcare system. The proposed e-DRBAC-HC framework leverages the principles of Role-Based Access Control (RBAC) and Blockchain's distributed ledger to establish secure, transparent, and interoperable EHR management. By implementing this framework, the healthcare sector can strengthen its access control mechanisms, ensuring timely and secure access to EHR while maintaining Security and confidentiality. The performance of this proposed framework is measured in terms of the efficiency and throughput of the system. It is observed that the proposed framework performs better concerning EHR encryption-decryption, token generation, verification, response, and RBAC policy execution.
Downloads
References
A. Rejeb, K. Rejeb, S. Zailani, and Y. Kayikci, “Knowledge diffusion of halal food research: a main path analysis,” J. Islam. Mark., vol. 14, no. 7, pp. 1715–1743, 2023, doi: 10.1108/JIMA-07-2021-0229.
J. Y. Lee et al., “Blockchain-Based Data Access Control and Key Agreement System in IoT Environment,” Sensors, vol. 23, no. 11, 2023, doi: 10.3390/s23115173. doi: 10.3390/s23115173. 3
J. Y. Lee et al., “Blockchain-Based Data Access Control and Key Agreement System in IoT Environment,” Sensors, vol. 23, no. 11, 2023, doi: 10.3390/s23115173. ,doi: 10.1109/MCC.2015.2.
M. Mettler, “Blockchain technology in healthcare: The revolution starts here,” in 2016 IEEE 18th International Conference on e-Health Networking, Applications and Services, Healthcom 2016, 2016, doi: 10.1109/HealthCom.2016.7749510.
S. Salonikias, M. Khair, T. Mastoras, and I. Mavridis, “Blockchain-Based Access Control in a Globalized Healthcare Provisioning Ecosystem,” Electron., vol. 11, no. 17, 2022, doi: 10.3390/electronics11172652. doi: 10.3390/electronics11172652.
M. Alsayegh, T. Moulahi, A. Alabdulatif, and P. Lorenz, “Towards Secure Searchable Electronic Health Records Using Consortium Blockchain,” Network, vol. 2, no. 2, pp. 239–256, 2022, doi: 10.3390/network2020016
H. Li, X. Yang, H. Wang, W. Wei, and W. Xue, “A Controllable Secure Blockchain-Based Electronic Healthcare Records Sharing Scheme,” J. Healthc. Eng., vol. 2022, 2022, doi: 10.1155/2022/2058497
P. Sharma, R. Jindal, and M. D. Borah, “Blockchain-based cloud storage system with CP-ABE-based access control and revocation process,” J. Supercomput., vol. 78, no. 6, pp. 7700–7728, 2022, doi: 10.1007/s11227-021-04179-4.
E. Barka, M. Al Baqari, C. A. Kerrache, and J. Herrera-Tapia, “Implementation of a Biometric-Based Blockchain System for Preserving Privacy, Security, and Access Control in Healthcare Records,” J. Sens. Actuator Networks, vol. 11, no. 4, 2022,doi: 10.3390/jsan11040085.
N. Eltayieb, R. Elhabob, A. Hassan, and F. Li, “A blockchain-based attribute-based signcryption scheme to secure data sharing in the Cloud,” J. Syst. Archit., vol. 102, 2020, doi: 10.1016/j.sysarc.2019.101653.
U. Chelladurai and S. Pandian, “A novel blockchain based electronic health record automation system for healthcare,” J.Ambient Intell. Humaniz. Comput., vol. 13, no. 1, pp. 693–703, 2022, doi: 10.1007/s12652-021-03163-3.
K. Azbeg, O. Ouchetto, and S. J. Andaloussi, “Access Control and Privacy-Preserving Blockchain-Based System for Diseases Management,” IEEE Trans. Comput. Soc. Syst., 2022, doi: 10.1109/TCSS.2022.3186945.
E. A. Shammar, A. T. Zahary, and A. A. Al-Shargabi, “An Attribute-Based Access Control Model for Internet of Things Using Hyperledger Fabric Blockchain,” Wirel. Commun. Mob. Comput., vol. 2022, 2022, doi: 10.1155/2022/6926408.
L. Hong, K. Zhang, J. Gong, and H. Qian, “A Practical and Efficient Blockchain-Assisted Attribute-Based Encryption Scheme for Access Control and Data Sharing,” Secur. Commun. Networks, vol. 2022, 2022, doi: 10.1155/2022/4978802.
K. Azbeg, O. Ouchetto, and S. Jai Andaloussi, “BlockMedCare: A healthcare system based on IoT, Blockchain and IPFS for data management security,” Egypt. Informatics J., vol. 23, no. 2, pp. 329–343, 2022, doi: 10.1016/j.eij.2022.02.004.
J. H. Kang and M. Seo, “Enhanced Authentication for Decentralized IoT Access Control Architecture,” Cryptography, vol. 7, no. 3, 2023, doi: 10.3390/cryptography7030042.
H. M. Hussien, S. M. Yasin, N. I. Udzir, and M. I. H. Ninggal, “Blockchain-based access control scheme for secure shared personal health records over decentralised storage,” Sensors, vol. 21, no. 7, 2021, doi: 10.3390/s21072462.
A. K. Al Hwaitat et al., “A New Blockchain-Based Authentication Framework for Secure IoT Networks,” Electron., vol. 12, no. 17, 2023, doi: 10.3390/electronics12173618.
B. S. Egala, A. K. Pradhan, V. Badarla, and S. P. Mohanty, “Fortified-Chain: A Blockchain-Based Framework for Security and Privacy-Assured Internet of Medical Things with Effective Access Control,” IEEE Internet Things J., vol. 8, no. 14, pp. 11717–11731, 2021, doi: 10.1109/JIOT.2021.3058946.
A. Dadhania, H. Patel, “DRBAC-Healthchain (DRBAC-HC): Decentralized Role Based Access Control Framework For Achieving Security And Privacy Using Blockchain In Healthcare System,” J. Pharm. Negat. Results, pp. 2931–2942, 2023, doi: 10.47750/pnr.2023.14.03.368.
Downloads
Published
How to Cite
Issue
Section
License
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
All papers should be submitted electronically. All submitted manuscripts must be original work that is not under submission at another journal or under consideration for publication in another form, such as a monograph or chapter of a book. Authors of submitted papers are obligated not to submit their paper for publication elsewhere until an editorial decision is rendered on their submission. Further, authors of accepted papers are prohibited from publishing the results in other publications that appear before the paper is published in the Journal unless they receive approval for doing so from the Editor-In-Chief.
IJISAE open access articles are licensed under a Creative Commons Attribution-ShareAlike 4.0 International License. This license lets the audience to give appropriate credit, provide a link to the license, and indicate if changes were made and if they remix, transform, or build upon the material, they must distribute contributions under the same license as the original.
