GDPR compliant data storage and sharing in smart healthcare system: a blockchain-based solution

Bai, P, Kumar, S, Kumar, K, Kaiwartya, O ORCID logoORCID: https://orcid.org/0000-0001-9669-8244, Mahmud, M ORCID logoORCID: https://orcid.org/0000-0002-2037-8348 and Lloret, J, 2022. GDPR compliant data storage and sharing in smart healthcare system: a blockchain-based solution. Electronics, 11 (20): 3311. ISSN 2079-9292

Full text not available from this repository.

Abstract

Smart healthcare systems provide user-centric medical services to patients based on collected information of patients inducing personal health information (PHI) and personal identifiable information (PII). The information (PII and PHI) flows into the smart healthcare system with or without any regulation and patient concern with the help of new information and communication technologies (ICT). The use of ICT comes with the security and privacy issues of collected PII and PHI data. The Europe Union has published the General Data Protection Regulation (GDPR) to regulate the flow of personal information. Towards this end, this paper proposes a blockchain-based data storage and sharing framework for a smart healthcare system that complies with the “Privacy by Design” rule of the GDPR. The personal information collected from patients is stored on off-chain storage (IPFS), and other information is stored on the blockchain ledger, which is visible to all participants. The smart contracts are designed to share the PII data with another participant based on prior permission of the data owner. The proposed framework also includes the deletion of PII and PHI in the system as per the “Right to be Forgotten” GDPR rule. Security and privacy analyses are performed for the framework to demonstrate the security and privacy of data while sharing and at rest. The comparative performance analysis demonstrates the benefit of the proposed GDPR-compliant data storage and sharing framework using blockchain. It is evident from the reported results that the proposed framework outperforms the state-of-the-art techniques in terms of performance metrics in a smart healthcare system.

Item Type: Journal article
Publication Title: Electronics
Creators: Bai, P., Kumar, S., Kumar, K., Kaiwartya, O., Mahmud, M. and Lloret, J.
Publisher: MDPI
Date: 14 October 2022
Volume: 11
Number: 20
ISSN: 2079-9292
Identifiers:
Number
Type
10.3390/electronics11203311
DOI
1630263
Other
Divisions: Schools > School of Science and Technology
Record created by: Jonathan Gallacher
Date Added: 03 Jan 2023 17:09
Last Modified: 03 Jan 2023 17:09
URI: https://irep.ntu.ac.uk/id/eprint/47731

Actions (login required)

Edit View Edit View

Statistics

Views

Views per month over past year

Downloads

Downloads per month over past year