Lightweight Cryptographic Protection of Sensitive Data Using ECDSA in a Blockchain-IPFS Architecture

Abstract

Health-care is undergoing a considerable digital shift in the present state, which is driven by the rise of new technologies and the changes taking place globally. The movement is rebalancing the provision and availability of health care, at the same time that it highlights the importance of protecting confidential information about patients. Coupled with the cryptographic primitives, blockchain technology provides a formidable answer, as it promises to improve data integrity using decentralized processes.

In this paper, a hybrid blockchain-based EHR management and security solution to Electronic Health Records (EHRs) is described. Having considered the drawbacks of the blockchain in its ability to work with large files the system is connected with Ethereum blockchain through Ganache and program construction tools is equipped with the InterPlanetary File System (IPFS). In the hybrid model, one does store each row hash (unique identifier) of the patients records on the blockchain, but one does not store the actual data on the blockchain, instead on IPFS. A Decentralized Application (DApp) built on the programing language of Ethereum, Solidity, and the web3.js interface also allows secure data access via cryptocurrency wallets like MetaMask.

The use of smart contracts is deployed to process transactions to achieve transparency and verifiability. To enhance security the Elliptic Curve Digital Signature Algorithm (ECDSA) is adapted to provide unauthorised access. Results of simulation reveal that a suggested method is reliable in providing patient data security, maintain immutability, and secure exchange of data. The approach promotes transparency within the digital health-care systems and strengthens the stakeholder belief by allowing a decentralised structure of these systems.