Blockchain-based multi-hop permission delegation scheme with controllable delegation depth for electronic health record sharing

• DOI: 10.1016/j.hcc.2022.100084
• Publication Date: 2022-10-14T12:26:41Z
• Authors: Ya Gao; Aiqing Zhang; Shu Wu; Jindou Chen
• Keywords: Blockchain; Permission delegation; Electronic computers. Computer science; Smart contract; 0202 electrical engineering, electronic engineering, information engineering; Access control; QA75.5-76.95; 02 engineering and technology; Data security

Permission delegation has become a new way for data sharing by delegating the authorized permission to other users. A flexible authorization model with strict access control policies is promising for electronic health record (EHR) sharing with security. In this paper, a blockchain-based multi-hop permission delegation scheme with controllable delegation depth for EHR sharing has been presented. We use the interplanetary file system (IPFS) for storing the original EHRs. Smart contracts and proxy re-encryption technology are implemented for permission delegation. In order to ensure data security, we use attribute-based encryption to provide fine-grained access control. Additionally, blockchain is used to achieve traceability and immutability. We deploy smart contracts so that the delegation depth can be set by delegators. Security analysis of the proposed protocol shows that our solution meets the designed goals. Finally, we evaluate the proposed algorithm and implement the scheme on the Ethereum test chain. Our scheme outperforms the competition in terms of performance, according to the results of our experiments.