MEXchange: A Privacy-Preserving Blockchain-Based Framework for Health Information Exchange Using Ring Signature and Stealth Address
Health information exchange (HIE) refers to the integrated management and secure sharing of health information among healthcare entities. HIE improves healthcare quality and streamlines healthcare administrative work. These advantages have propelled health- care stakeholders to implement HIE. Howeve...
Main Authors: | , |
---|---|
Format: | Article |
Language: | English |
Published: |
IEEE
2021-01-01
|
Series: | IEEE Access |
Subjects: | |
Online Access: | https://ieeexplore.ieee.org/document/9627166/ |
_version_ | 1818399915429068800 |
---|---|
author | Deoksang Lee Minseok Song |
author_facet | Deoksang Lee Minseok Song |
author_sort | Deoksang Lee |
collection | DOAJ |
description | Health information exchange (HIE) refers to the integrated management and secure sharing of health information among healthcare entities. HIE improves healthcare quality and streamlines healthcare administrative work. These advantages have propelled health- care stakeholders to implement HIE. However, challenged by issues such as security, privacy, and costs, HIE is not widespread. Recent studies have suggested blockchain-based HIE for solving security and privacy issues. Unfortunately, existing blockchain-based HIE studies do not consider the privacy issues caused by analyzing senders and receivers of transactions in the blockchain. In this work, we suggest MEXchange, a novel blockchain-based privacy-preserving HIE that prevents the privacy issue by obscuring the sender and concealing receiver addresses. We propose smart contracts and workflow that use ring signature and stealth address for blockchain-based HIE. Software components and implementation of MEXchange on the Ethereum private network are discussed. We evaluate MEXchange quantitatively by measuring the transaction latency and throughput of exchanging. Also, we evaluate MEXchange qualitatively using the requirements of the Office of National Coordinator for Health Information Technology (ONC). Moreover, we proceed with threat modeling based on STRIDE. Finally, we compare MEXchange with Ancile, FHIRChain, Integrating the Healthcare Enterprise Cross-Enterprise Document Sharing (IHE XDS), and MedRec. The MEXchange lowers barriers to the application of blockchain-based HIE systems by mitigating privacy and security issues among healthcare stakeholders. |
first_indexed | 2024-12-14T07:28:16Z |
format | Article |
id | doaj.art-4a1adaad90da4b85b7b3952ef9995c3e |
institution | Directory Open Access Journal |
issn | 2169-3536 |
language | English |
last_indexed | 2024-12-14T07:28:16Z |
publishDate | 2021-01-01 |
publisher | IEEE |
record_format | Article |
series | IEEE Access |
spelling | doaj.art-4a1adaad90da4b85b7b3952ef9995c3e2022-12-21T23:11:26ZengIEEEIEEE Access2169-35362021-01-01915812215813910.1109/ACCESS.2021.31305529627166MEXchange: A Privacy-Preserving Blockchain-Based Framework for Health Information Exchange Using Ring Signature and Stealth AddressDeoksang Lee0https://orcid.org/0000-0001-9703-3172Minseok Song1https://orcid.org/0000-0002-6813-8853Department of Industrial & Management Engineering, Pohang University of Science and Technology (POSTECH), Pohang, Republic of KoreaDepartment of Industrial & Management Engineering, Pohang University of Science and Technology (POSTECH), Pohang, Republic of KoreaHealth information exchange (HIE) refers to the integrated management and secure sharing of health information among healthcare entities. HIE improves healthcare quality and streamlines healthcare administrative work. These advantages have propelled health- care stakeholders to implement HIE. However, challenged by issues such as security, privacy, and costs, HIE is not widespread. Recent studies have suggested blockchain-based HIE for solving security and privacy issues. Unfortunately, existing blockchain-based HIE studies do not consider the privacy issues caused by analyzing senders and receivers of transactions in the blockchain. In this work, we suggest MEXchange, a novel blockchain-based privacy-preserving HIE that prevents the privacy issue by obscuring the sender and concealing receiver addresses. We propose smart contracts and workflow that use ring signature and stealth address for blockchain-based HIE. Software components and implementation of MEXchange on the Ethereum private network are discussed. We evaluate MEXchange quantitatively by measuring the transaction latency and throughput of exchanging. Also, we evaluate MEXchange qualitatively using the requirements of the Office of National Coordinator for Health Information Technology (ONC). Moreover, we proceed with threat modeling based on STRIDE. Finally, we compare MEXchange with Ancile, FHIRChain, Integrating the Healthcare Enterprise Cross-Enterprise Document Sharing (IHE XDS), and MedRec. The MEXchange lowers barriers to the application of blockchain-based HIE systems by mitigating privacy and security issues among healthcare stakeholders.https://ieeexplore.ieee.org/document/9627166/Health information exchangeblockchainring signaturestealth addressprivacy |
spellingShingle | Deoksang Lee Minseok Song MEXchange: A Privacy-Preserving Blockchain-Based Framework for Health Information Exchange Using Ring Signature and Stealth Address IEEE Access Health information exchange blockchain ring signature stealth address privacy |
title | MEXchange: A Privacy-Preserving Blockchain-Based Framework for Health Information Exchange Using Ring Signature and Stealth Address |
title_full | MEXchange: A Privacy-Preserving Blockchain-Based Framework for Health Information Exchange Using Ring Signature and Stealth Address |
title_fullStr | MEXchange: A Privacy-Preserving Blockchain-Based Framework for Health Information Exchange Using Ring Signature and Stealth Address |
title_full_unstemmed | MEXchange: A Privacy-Preserving Blockchain-Based Framework for Health Information Exchange Using Ring Signature and Stealth Address |
title_short | MEXchange: A Privacy-Preserving Blockchain-Based Framework for Health Information Exchange Using Ring Signature and Stealth Address |
title_sort | mexchange a privacy preserving blockchain based framework for health information exchange using ring signature and stealth address |
topic | Health information exchange blockchain ring signature stealth address privacy |
url | https://ieeexplore.ieee.org/document/9627166/ |
work_keys_str_mv | AT deoksanglee mexchangeaprivacypreservingblockchainbasedframeworkforhealthinformationexchangeusingringsignatureandstealthaddress AT minseoksong mexchangeaprivacypreservingblockchainbasedframeworkforhealthinformationexchangeusingringsignatureandstealthaddress |