A Blockchain Architecture for Electronic Health Records
Blockchain; Healthcare; Electronic Health Records (EHR); Data Sharing; Data Security; Hyperledger Fabric
The healthcare industry faces critical challenges in managing Electronic Health
Records (EHRs), notably regarding data security, interoperability, and patient privacy.
Traditional centralized health information systems often lead to fragmented data storage,
vulnerabilities, and inefficiencies in data sharing, negatively affecting patient care and
data security. This dissertation investigates how blockchain technology, characterized by
decentralization, immutability, and transparency, can address these challenges by enhancing
the management of EHRs.
A systematic mapping study reviewed 35 scholarly works retrieved from the Scopus
database, identifying blockchain’s potential to significantly improve data interoperability,
security, and patient-centric data management. Nevertheless, notable issues such as
scalability, regulatory compliance, and privacy remain barriers to widespread adoption.
A blockchain-based architecture leveraging Hyperledger Fabric is proposed, defining
clear functional and non-functional requirements centered around security, interoperability,
and patient consent management. Critical architectural components include smart contracts,
consensus mechanisms, and a permissioned blockchain network.
A proof-of-concept (PoC) implementation, developed using Hyperledger Fabric,
validates the feasibility of the proposed architecture. The PoC demonstrates successful
EHR data transactions, secure patient consent management, and adherence to stringent
security and access controls, evaluated against defined Quality of Service (QoS) metrics.
Overall, this dissertation provides an essential contribution by offering a viable
blockchain-based solution architecture for secure and efficient data sharing in healthcare,
potentially improving data interoperability, security, and patient empowerment.
Future research should address scalability, system integration complexities, and regulatory
compliance nuances to facilitate broader adoption in healthcare contexts.