Design and Implementation of Monitoring Platform for Medical Data Abuse Based on Blockchain

doi:10.3969/j.issn.1671-1122.2021.05.007

Abstract

Abstract:

Medical data management systems store many patients’ medical privacy data with very high value, and these data become the targets of internal and external attackers. Therefore, this paper proposes a medical data operation recording system based on blockchain technology(RecordGuard). The system can record the use of medical data by medical staff or patients themselves and then store these data via blockchain technology. The system is designed to help regulatory authorities track medical data use, and meanwhile, in case of medical disputes, allow arbitration agencies to verify the evidence’s authenticity, which mainly alleviates the problem of mistrust between doctors and patients.

Key words: blockchain, privacy protection, security, smart healthcare

CLC Number:

TP309

LIU Zi’ang, HUANG Yuanyuan, MA Jiali, ZHOU Rui. Design and Implementation of Monitoring Platform for Medical Data Abuse Based on Blockchain[J]. Netinfo Security, 2021, 21(5): 58-66.

Figures/Tables 17

References 23

[1]	YUE Xiao, WANG Huiju, JIN Dawei, et al. Healthcare Data Gateways: Found Healthcare Intelligence on Blockchain with Novel Privacy Risk Control[J]. Journal of Medical Systems, 2016,40(10):1-8. doi: 10.1007/s10916-015-0365-5 URL
[2]	ASHTON K. That ‘Internet of Things’ Thing[J]. RFID Journal, 2009,22(7):97-114.
[3]	DANNEN C. Introducing Ethereum and Solidity[M]. Berkeley: Apress, 2017.
[4]	METTLER M. Blockchain Technology in Healthcare: The Revolution Starts Here[C]// IEEE. 18th International Conference on E-health Networking, Applications and Services(Healthcom), September 14-17, 2016, Munich, Germany. New Jersey: IEEE, 2016: 1-3.
[5]	PRISCO G. The Blockchain for Healthcare: Gem Launches Gem Health Network with Philips Blockchain Lab[EB/OL]. https://bitcoinmagazine.com/articles/the-blockchain-for-heathcare-gem-launches-gem-health-network-with-philips-blockchain-lab-1461674938, 2016-04-26.
[6]	TAYLOR P. Applying Blockchain Technology to Medicine Traceability[EB/OL]. https://www.securingindustry.com/pharmaceuticals/applying-blockchain-technology-to-medicine-traceability/s40/a2766/, 2016-04-27.
[7]	KUO T T, KIM H E, OHNO-MACHADO L. Blockchain Distributed Ledger Technologies for Biomedical and Health Care Applications[J]. Journal of the American Medical Informatics Association, 2017,24(6):1211-1220. doi: 10.1093/jamia/ocx068 URL
[8]	WILLIAMS-GRUT O. Estonia is Using the Technology behind Bitcoin to Secure 1 Million Health Records[EB/OL]. https://www.businessinsider.in/Estonia-is-using-the-technology-behind-bitcoin-to-secure-1-million-health-records/articleshow/51246942.cms, 2016-03-03.
[9]	BAXENDALE G. Can Blockchain Revolutionise EPRs?[J]. ITNow, 2016,58(1):38-39.
[10]	ROLSTON M E, FICKLIN J L, NAIRN M A, et al. User-application Interface: U.S. Patent 9, 176, 747[P]. 2015-11-03.
[11]	BAKKEN D. Middleware[EB/OL]. http://www.dia.uniroma3.it/~cabibbo/ids/altrui/middleware-bakken.pdf, 2020-12-21.
[12]	BRAY T. The JavaScript Object Notation(JSON) Data Interchange Format[EB/OL]. https://tools.ietf.org/id/draft-ietf-jsonbis-rfc7159bis-04.html#:~:text=JavaScript%20Object%20Notation%20(JSON)%20is,portable%20representation%20of%20structured%20data, 2017-07-19.
[13]	THURLOW R. RPC: Remote Procedure Call Protocol Specification Version 2[EB/OL]. http://www.ietf.org/rfc/rfc5531.txt, 2020-12-21.
[14]	LONEY K. Oracle Database 10g: the Complete Reference[M]. London: McGraw-Hill/Osborne, 2004.
[15]	FIELDING R T, KAISER G. The Apache HTTP Server Project[J]. IEEE Internet Computing, 1997,1(4):88-90.
[16]	BACUDIO A G, YUAN X, CHU B T B, et al. An Overview of Penetration Testing[J]. International Journal of Network Security & Its Applications, 2011,3(6):19-38.
[17]	LIAO H J, LIN C H R, LIN Y C, et al. Intrusion Detection System: A Comprehensive Review[J]. Journal of Network and Computer Applications, 2013,36(1):16-24. doi: 10.1016/j.jnca.2012.09.004 URL
[18]	MONSHIZADEH M, NALDURG P, VENKATAKRISHNAN V N. Mace: Detecting Privilege Escalation Vulnerabilities in Web Applications[EB/OL]. https://dl.acm.org/doi/pdf/10.1145/2660267.2660337, 2020-05-14.
[19]	DigitalOcean. DigitalOcean-The Developer Cloud[EB/OL]. https://www.digitalocean.com/, 2020-12-21.
[20]	SUNDARAM R, KANIYAR S N. Measuring Network Jitter on Application Packet Flows: U.S. Patent 6, 928, 473[P]. 2005-08-09.
[21]	LARIMER D. Delegated Proof-of-stake (DPOS)[EB/OL]. https://steemit.com/bitshares/@testz/bitshares-history-delegated-proof-of-stake-dpos, 2020-12-21.
[22]	BACH L M, MIHALJEVIC B, ZAGAR M. Comparative Analysis of Blockchain Consensus Algorithms[C]// IEEE. 41st International Convention on Information and Communication Technology, Electronics and Microelectronics(MIPRO), May 21-25, 2018, Opatija, Croatia. New Jersey: IEEE, 2018: 1545-1550.
[23]	SALEM M B, STOLFO S J. Detecting Masqueraders: A Comparison of One-class Bag-of-words User Behavior Modeling Techniques[EB/OL]. http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.180.6427, 2020-05-15.

	公有区块链	联盟区块链	私有区块链
参与者	任何人	联盟成员	内部人员
记账员	所有矿工	联盟指定	管理员指定
Coinbase奖励	需要	可选	无需
去中心化程度	高	中	低
操作速度	慢	中	快
应用场景	数字货币	支付	审计
案例	比特币	超级账本	暂无

数据名	描述	数据类型
time	operation time	timestamp
op_type	operation type	string
op_sys	medical data management system name	string
op_institution	op_sys’s institution	string
data_type	type of user data accessed	string
operator	person made this operation	string
patient	patient name in this operation	string

属性名	智能合约中参数名	是否用于记录搜索
time	timestamp	Yes
patient	keyArg1	Yes
op_institution	keyArg2	Yes
N/A	keyArg3	Yes（reserved, null by default）
operator	infoArg1	No
op_type	infoArg2	No
op_sys	infoArg3	No
data_type	infoArg4	No
N/A	infoArg5	No

硬件设备	型号
CPU	Intel(R) Xeon(R) CPU E5-2630L v2 @2.40 GHz x 1
内存	2 GB
硬盘	80 GB
网络带宽	1000 Mbps
OS	Ubuntu 18.04 LTS

软件	版本号
Kernel	4.15.0-76-generic
Geth	1.9.10-stable-58cf5686
Python	3.6.8
Apache	2.4.29
MySQL Server	5.7.9