GDPR Compliant Data Storage and Sharing in Smart Healthcare System: A Blockchain-Based Solution
Smart healthcare systems provide user-centric medical services to patients based on collected information of patients inducing personal health information (PHI) and personal identifiable information (PII). The information (PII and PHI) flows into the smart healthcare system with or without any regul...
| Main Authors: | , , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2022-10-01
|
| Series: | Electronics |
| Subjects: | |
| Online Access: | https://www.mdpi.com/2079-9292/11/20/3311 |
| _version_ | 1797473632479346688 |
|---|---|
| author | Pinky Bai Sushil Kumar Kirshna Kumar Omprakash Kaiwartya Mufti Mahmud Jaime Lloret |
| author_facet | Pinky Bai Sushil Kumar Kirshna Kumar Omprakash Kaiwartya Mufti Mahmud Jaime Lloret |
| author_sort | Pinky Bai |
| collection | DOAJ |
| description | Smart healthcare systems provide user-centric medical services to patients based on collected information of patients inducing personal health information (PHI) and personal identifiable information (PII). The information (PII and PHI) flows into the smart healthcare system with or without any regulation and patient concern with the help of new information and communication technologies (ICT). The use of ICT comes with the security and privacy issues of collected PII and PHI data. The Europe Union has published the General Data Protection Regulation (GDPR) to regulate the flow of personal information. Towards this end, this paper proposes a blockchain-based data storage and sharing framework for a smart healthcare system that complies with the “Privacy by Design” rule of the GDPR. The personal information collected from patients is stored on off-chain storage (IPFS), and other information is stored on the blockchain ledger, which is visible to all participants. The smart contracts are designed to share the PII data with another participant based on prior permission of the data owner. The proposed framework also includes the deletion of PII and PHI in the system as per the “Right to be Forgotten” GDPR rule. Security and privacy analyses are performed for the framework to demonstrate the security and privacy of data while sharing and at rest. The comparative performance analysis demonstrates the benefit of the proposed GDPR-compliant data storage and sharing framework using blockchain. It is evident from the reported results that the proposed framework outperforms the state-of-the-art techniques in terms of performance metrics in a smart healthcare system. |
| first_indexed | 2024-03-09T20:19:53Z |
| format | Article |
| id | doaj.art-dffee80f9e254785849226275094104b |
| institution | Directory Open Access Journal |
| issn | 2079-9292 |
| language | English |
| last_indexed | 2024-03-09T20:19:53Z |
| publishDate | 2022-10-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Electronics |
| spelling | doaj.art-dffee80f9e254785849226275094104b2023-11-23T23:53:07ZengMDPI AGElectronics2079-92922022-10-011120331110.3390/electronics11203311GDPR Compliant Data Storage and Sharing in Smart Healthcare System: A Blockchain-Based SolutionPinky Bai0Sushil Kumar1Kirshna Kumar2Omprakash Kaiwartya3Mufti Mahmud4Jaime Lloret5School of Computer & Systems Sciences, Jawaharlal Nehru University, New Delhi 110067, IndiaSchool of Computer & Systems Sciences, Jawaharlal Nehru University, New Delhi 110067, IndiaSchool of Computer & Systems Sciences, Jawaharlal Nehru University, New Delhi 110067, IndiaDepartment of Computer Science, Nottingham Trent University, Clifton Lane, Nottingham NG11 8NS, UKDepartment of Computer Science, Nottingham Trent University, Clifton Lane, Nottingham NG11 8NS, UKInstituto de Investigación para la Gestión Integrada de Zonas Costeras, Universitat Politécnica de Valencia, Camino Vera s/n, 46022 Valencia, SpainSmart healthcare systems provide user-centric medical services to patients based on collected information of patients inducing personal health information (PHI) and personal identifiable information (PII). The information (PII and PHI) flows into the smart healthcare system with or without any regulation and patient concern with the help of new information and communication technologies (ICT). The use of ICT comes with the security and privacy issues of collected PII and PHI data. The Europe Union has published the General Data Protection Regulation (GDPR) to regulate the flow of personal information. Towards this end, this paper proposes a blockchain-based data storage and sharing framework for a smart healthcare system that complies with the “Privacy by Design” rule of the GDPR. The personal information collected from patients is stored on off-chain storage (IPFS), and other information is stored on the blockchain ledger, which is visible to all participants. The smart contracts are designed to share the PII data with another participant based on prior permission of the data owner. The proposed framework also includes the deletion of PII and PHI in the system as per the “Right to be Forgotten” GDPR rule. Security and privacy analyses are performed for the framework to demonstrate the security and privacy of data while sharing and at rest. The comparative performance analysis demonstrates the benefit of the proposed GDPR-compliant data storage and sharing framework using blockchain. It is evident from the reported results that the proposed framework outperforms the state-of-the-art techniques in terms of performance metrics in a smart healthcare system.https://www.mdpi.com/2079-9292/11/20/3311smart healthcare systemGDPRdata sharingdata storageright to be forgotten |
| spellingShingle | Pinky Bai Sushil Kumar Kirshna Kumar Omprakash Kaiwartya Mufti Mahmud Jaime Lloret GDPR Compliant Data Storage and Sharing in Smart Healthcare System: A Blockchain-Based Solution Electronics smart healthcare system GDPR data sharing data storage right to be forgotten |
| title | GDPR Compliant Data Storage and Sharing in Smart Healthcare System: A Blockchain-Based Solution |
| title_full | GDPR Compliant Data Storage and Sharing in Smart Healthcare System: A Blockchain-Based Solution |
| title_fullStr | GDPR Compliant Data Storage and Sharing in Smart Healthcare System: A Blockchain-Based Solution |
| title_full_unstemmed | GDPR Compliant Data Storage and Sharing in Smart Healthcare System: A Blockchain-Based Solution |
| title_short | GDPR Compliant Data Storage and Sharing in Smart Healthcare System: A Blockchain-Based Solution |
| title_sort | gdpr compliant data storage and sharing in smart healthcare system a blockchain based solution |
| topic | smart healthcare system GDPR data sharing data storage right to be forgotten |
| url | https://www.mdpi.com/2079-9292/11/20/3311 |
| work_keys_str_mv | AT pinkybai gdprcompliantdatastorageandsharinginsmarthealthcaresystemablockchainbasedsolution AT sushilkumar gdprcompliantdatastorageandsharinginsmarthealthcaresystemablockchainbasedsolution AT kirshnakumar gdprcompliantdatastorageandsharinginsmarthealthcaresystemablockchainbasedsolution AT omprakashkaiwartya gdprcompliantdatastorageandsharinginsmarthealthcaresystemablockchainbasedsolution AT muftimahmud gdprcompliantdatastorageandsharinginsmarthealthcaresystemablockchainbasedsolution AT jaimelloret gdprcompliantdatastorageandsharinginsmarthealthcaresystemablockchainbasedsolution |