基于智能合约的电子病历访问控制委托框架

Smart contract based access control delegation framework for electronic medical records

为提高电子病历共享过程中的安全性和灵活性,提出一种基于智能合约的访问控制委托框架,实现不同实体间的电子病历共享,同时还可以授权其它实体对其电子病历进行委托管理。基于3种智能合约,分别用于访问控制、错误访问检测和用户委托,使访问权限和委托权限的授予具有可追溯性。通过私有以太坊系统对访问控制框架进行委托功能实现及性能评估,验证了框架具有较高可扩展性、可靠性和可操作性,对优化电子病历系统具有参考性价值。

A smart contract-based access control delegation framework was proposed to improve the security and flexibility of electronic medical record sharing.The sharing of electronic medical records among different entities was realized and other entities were authorized to delegate their electronic medical records management.Based on three smart contracts for access control,error access detection,and user delegation,access and delegation privileges were traceable.The implementation and performance evaluation of the delegation function of the access control framework by a private Ethernet system verifies that the framework has high scalability,reliability,and operability and is of reference value for optimizing the electronic medical record system.