电子病历(electronic medical records,EMR)能够安全高效地跨域共享,给患者跨域就诊带来极大便利,但传统集中式的电子病历管理方式存在隐私泄露、单点故障和病历确权等安全问题,不利于患者跨域就诊.本文提出了基于联盟链和代理重加密的电子病历跨域共享方案,利用区块链和星际文件系统规避了集中式管理带来的单点故障问题.患者通过代理重加密算法授权跨域数据用户解密病历密文,确保只有被授权的用户才能访问文件,实现不同信任域间的密文转换.该方案能抵抗多种类型攻击且计算成本较低.
Electronic medical records(EMR)can be safely and efficiently shared across domains, bringing great convenience to patients seeking medical treatment across domains. However, traditional centralized electronic medical record management methods have security issues such as privacy leakage, single point of failure, and medical record ownership, which are not conducive to patients seeking medical treatment across domains. This article proposes a cross-domain sharing scheme for electronic medical records based on consortium chain and proxy re-encryption. By combining blockchain and Inter Planetary File System, a distributed file storage system is provided to avoid the problem of single point of failure caused by centralized management. Patients authorize cross-domain data users to decrypt medical record ciphertext through proxy re-encryption algorithms, ensuring that only authorized users can access files and achieving ciphertext conversion between different trust domains. This scheme can resist multiple types of attacks and has a lower computational cost.
[1] 陈利,杨又.区块链技术在临床护理中的应用进展[J].中华护理杂志, 2024, 59(2): 250-256. DOI: 10.3761/j.issn.0254-1769.2024.02.018.
[2] LI C Y, DONG M X, LI J, et al. Healthchain: secure EMRs management and trading in distributed healthcare service system[J]. IEEE Internet Things J, 2021, 8(9): 7192-7202. DOI: 10.1109/JIOT.2020.3038721.
[3] 许德俊,冯东雷,晏雪鸣,等.基于区块链的电子病历自主管理[J].中国数字医学, 2021, 16(7): 18-23. DOI: 10.3969/j.issn.1673-7571.2021.07.004.
[4] AGYEKUM K O B O, XIA Q, SIFAH E B, et al. A proxy re-encryption approach to secure data sharing in the Internet of Things based on blockchain[J]. IEEE Syst J, 2022, 16(1): 1685-1696. DOI: 10.1109/JSYST.2021.3076759.
[5] YIN H J, CHEN E, ZHU Y, et al. Attribute-based private data sharing with script-driven programmable ciphertext and decentralized key management in blockchain Internet of Things[J]. IEEE Internet Things J, 2022, 9(13): 10625-10639. DOI: 10.1109/JIOT.2021.3124016.
[6] MIAO Z K, YE C X, YANG P, et al. A scheme for electronic evidence sharing based on blockchain and proxy re-encryption[C] //2021 4th International Conference on Blockchain Technology and Applications. Xi’an China. ACM, 2021: 10.1145/3510487.3510490. DOI: 10.1145/3510487.3510490.
[7] TIAN J M, LU Y, WANG F, et al. Efficient multi-receiver certificate-based proxy re-encryption scheme for secure cloud data sharing[M] //Advances in Artificial Intelligence and Security, Cham: Springer International Publishing, 2021: 593-605.10.1007/978-3-030-78618-2_49
[8] MANZOOR A, BRAEKEN A, KANHERE S S, et al. Proxy re-encryption enabled secure and anonymous IoT data sharing platform based on blockchain[J]. J Netw Comput Appl, 2021, 176: 102917. DOI: 10.1016/j.jnca.2020.102917.
[9] LIU X G, YAN J, SHAN S Q, et al. A blockchain-assisted electronic medical records by using proxy reencryption and multisignature[J]. Secur Commun Netw, 2022, 2022: 6737942. DOI: 10.1155/2022/6737942.
[10] KAN J, ZHANG J, LIU D W, et al. Proxy re-encryption scheme for decentralized storage networks[J]. Appl Sci, 2022, 12(9): 4260. DOI: 10.3390/app12094260.
[11] ALREBDI N, ALABDULATIF A, IWENDI C, et al. SVBE: searchable and verifiable blockchain-based electronic medical records system[J]. Sci Rep, 2022, 12(1): 266. DOI: 10.1038/s41598-021-04124-8.
[12] 张小红,孙岚岚.属性代理重加密的区块链密文云存储共享研究[J].系统仿真学报, 2020, 32(6): 1009-1020. DOI: 10.16182/j.issn1004731x.joss.18-0658.
[13] YAQOOB I, SALAH K, JAYARAMAN R, et al. Blockchain for healthcare data management: opportunities, challenges, and future recommendations[J]. Neural Comput Appl, 2022, 34(14): 11475-11490. DOI: 10.1007/s00521-020-05519-w.
[14] ZAABAR B, CHEIKHROUHOU O, JAMIL F, et al. HealthBlock: a secure blockchain-based healthcare data management system[J]. Comput Netw, 2021, 200: 108500. DOI: 10.1016/j.comnet.2021.108500.[LinkOut]
[15] ZHANG T, SHEN J, LAI C F, et al. Multi-server assisted data sharing supporting secure deduplication for metaverse healthcare systems[J]. Future Gener Comput Syst, 2023, 140: 299-310. DOI: 10.1016/j.future.2022.10.031.
[16] WU G J, WANG S P, NING Z L, et al. Blockchain-enabled privacy-preserving access control for data publishing and sharing in the Internet of medical things[J]. IEEE Internet Things J, 2022, 9(11): 8091-8104. DOI: 10.1109/JIOT.2021.3138104.
[17] MANI V, MANICKAM P, ALOTAIBI Y, et al. Hyperledger healthchain: patient-centric IPFS-based storage of health records[J]. Electronics, 2021, 10(23): 3003. DOI: 10.3390/electronics10233003.
[18] KAUR J, RANI R, KALRA N. Attribute-based access control scheme for secure storage and sharing of EHRs using blockchain and IPFS[J]. Clust Comput, 2023, 27(1): 1047-1061. DOI: 10.1007/s10586-023-04038-2.
[19] LIU J W, FAN Y, SUN R, et al. Blockchain-aided privacy-preserving medical data sharing scheme for E-healthcare system[J]. IEEE Internet Things J, 2023, 10(24): 21377-21388. DOI: 10.1109/JIOT.2023.3287636.
[20] RAMESH D, MISHRA R, ATREY P K, et al. Blockchain based efficient tamper-proof EHR storage for decentralized cloud-assisted storage[J]. Alex Eng J, 2023, 68: 205-226. DOI: 10.1016/j.aej.2023.01.012. (