Guangdong Key Laboratory of Information Security, School of Data and Computer Science, Sun Yat-Sen University, Guangzhou, Guangdong, 510275, People's Republic of China.
Guangxi Key Laboratory of Cryptography and Information Security, School of Computer Science and Information Security, Guilin University of Electronic Technology, Guilin, Guangxi, 541004, People's Republic of China.
J Med Syst. 2019 Jan 3;43(2):26. doi: 10.1007/s10916-018-1144-x.
Medical data are important in diagnosis, treatment, recovery, and medical accident investigation. The integrity and availability of medical data are the basic guarantee for the smooth operation of these activities. The privacy of medical data is a natural demand from the sensitivity of medical data. At present, there are mainly two ways to protect the privacy of medical data. One way is to store medical data in a local database and set up an access control strategy of the database. The other way is to encrypt medical data with the patient's key and to share the key when needed. The problem with the first method is that the data in the local database may be modified or deleted. The problem with the second method is that the key cannot be shared when the patient dies during the diagnosis and treatment. These two problems will damage the availability of data. This paper proposes to establish a shared key that could be reconstructed by the legitimate parties before the process of diagnosis and treatment begins. The data in the diagnosis and treatment process is encrypted and stored in a blockchain using the shared key. The proposal meets the integrity, availability and privacy requirements of medical data. It uses the sibling intractable function families (SIFF) to establish a shared key, and uses the Hyperledger Fabric to store encrypted data. The simulation shows that the system has good efficiency. Additionally, it is the first time to introduce SIFF to a blockchain application.
医学数据在诊断、治疗、康复和医疗事故调查中都非常重要。医学数据的完整性和可用性是这些活动顺利进行的基本保证。医学数据的隐私是数据敏感性的自然需求。目前，保护医学数据隐私主要有两种方法。一种方法是将医学数据存储在本地数据库中，并设置数据库的访问控制策略。另一种方法是使用患者的密钥对医学数据进行加密，并在需要时共享密钥。第一种方法的问题在于本地数据库中的数据可能会被修改或删除。第二种方法的问题在于在诊断和治疗过程中患者死亡时无法共享密钥。这两个问题都会破坏数据的可用性。本文提出在诊断和治疗开始之前建立一个可由合法方重构的共享密钥。使用共享密钥对诊断和治疗过程中的数据进行加密，并将其存储在区块链中。该方案满足了医学数据的完整性、可用性和隐私性要求。它使用兄弟不可分辨函数族（SIFF）来建立共享密钥，并使用 Hyperledger Fabric 来存储加密数据。仿真表明，该系统具有良好的效率。此外，这也是首次将 SIFF 引入区块链应用。
