Abstract
Blockchain technology is receiving greater attention for enhancing the security of patient records systems; however, it is not a panacea, as many security risks have been found in these healthcare applications. This study conducts a state-of-the-art analysis of emerging risks in blockchain-based patient health record systems, their severity level, impact, and the corresponding countermeasures against them. In addition, we conclude our observations and indicate how blockchain security vulnerabilities may develop in the future. This study aims to promote more research on blockchain security challenges by offering researchers insights into future security and privacy developments in blockchain-based patient health record systems.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Behnke, R.: How Blockchain DDoS Attacks Work (2022). Halborn.com. https://halborn.com/how-blockchain-ddos-attacks-work/
Marbouh, D., et al.: Blockchain for COVID-19: review, opportunities, and a trusted tracking system. Arab. J. Sci. Eng. 45(12), 9895–9911 (2020). https://doi.org/10.1007/s13369-020-04950-4
Azaria, A., Ekblaw, A., Vieira, T., & Lippman, A.: MedRec: using blockchain for medical data access and permission management. In: 2016 2nd International Conference on Open and Big Data (OBD), pp. 25–30. IEEE, August 2016
Alsunbul, A., Elmedany, W., Al-Ammal, H.: Blockchain application in healthcare industry: attacks and countermeasures. In: 2021 International Conference on Data Analytics for Business and Industry (ICDABI), pp. 621–629. IEEE, October 2021
Kumar, T., Ramani, V., Ahmad, I., Braeken, A., Harjula, E., Ylianttila, M.: Blockchain utilization in healthcare: key requirements and challenges. In: 2018 IEEE 20th International conference on e-health networking, applications and services (Healthcom), pp. 1–7. IEEE, September 2018
Attaran, M.: Blockchain technology in healthcare: challenges and opportunities. Int. J. Healthc. Manag. 15(1), 70–83 (2020). https://doi.org/10.1080/20479700.2020.1843887
Onik, M.M.H., Aich, S., Yang, J., Kim, C.S., Kim, H.C.: Blockchain in Healthcare: Challenges and Solutions. Big Data Analytics for Intelligent Healthcare Management, pp. 197–226. Academic Press, Cambridge (2019)
Ismail, L., Materwala, H.: Article; a review of blockchain architecture and consensus; protocols: use cases, challenges, and solutions. Symmetry 11(10), 1198 (2019). https://doi.org/10.3390/sym11101198
Nakamoto, S.: Bitcoin: A Peer-to-Peer Electronic Cash System (2008). Accessed 20 Aug 2018. https://bitcoin.org/bitcoin.pdf
Rifi, N., Rachkidi, E., Agoulmine, N., Taher, N.C.: Towards using blockchain technology for eHealth data access management. In: 2017 4th International Conference on Advances in Biomedical Engineering (ICABME 2017), pp. 1–4. IEEE (2017)
Vacca, A., Di Sorbo, A., Visaggio, C., Canfora, G.: A systematic literature review of blockchain and smart contract development: techniques, tools, and open challenges. J. Syst. Softw. 174, 110891 (2021)
Morkunas, V.J., Paschen, J., Boon, E.: How blockchain technologies impact your business model. Bus. Horiz. 62(3), 295–306 (2019)
Noon, A.K., Aziz, O., Zahra, I., Anwar, M.: Implementation of Blockchain in Healthcare: A Systematic Review. In 2021 International Conference on Innovative Computing (ICIC), pp. 1–10. IEEE, November 2021
Chen, Y., Ding, S., Xu, Z., Zheng, H., Yang, S.: Blockchain-based medical records secure storage and medical service framework. J. Med. Syst. 43(1), 1–9 (2018). https://doi.org/10.1007/s10916-018-1121-4
Abunadi, I., Kumar, R.: Blockchain and business process management in health care, especially for COVID-19 cases. Secur. Commun. Netw. 2021, 1–16 (2021). https://doi.org/10.1155/2021/2245808
Khan, S.N., Loukil, F., Ghedira-Guegan, C., Benkhelifa, E., Bani-Hani, A.: Blockchain smart contracts: applications, challenges, and future trends. Peer-to-Peer Netw. Appl. 14(5), 2901–2925 (2021). https://doi.org/10.1007/s12083-021-01127-0
Wang, H., Wang, Y., Cao, Z., Li, Z., Xiong, G.: An overview of blockchain security analysis. In: Cyber Security: 15th International Annual Conference, CNCERT 2018, pp. 14–16 August (2018), Revised Selected Papers 15, pp. 55–72. Springer Singapore (2019)
Iqbal, M., Matulevičius, R.: Exploring Sybil and double-spending risks in blockchain systems. IEEE Access 9, 76153–76177 (2021)
Hasanova, H., Baek, U.J., Shin, M.G., Cho, K., Kim, M.S.: A survey on blockchain cybersecurity vulnerabilities and possible countermeasures. Int. J. Netw. Manag. 29(2), e2060 (2019)
Jabarulla, M., Lee, H.: A Blockchain and artificial intelligence-based, patient-centric healthcare system for combating the COVID-19 pandemic: opportunities and applications. Healthcare 9(8), 1019 (2021). https://doi.org/10.3390/healthcare9081019
Mitra, D., Tauz, L., Dolecek, L.: Overcoming Data Availability Attacks in Blockchain Systems: LDPC Code Design for Coded Merkle Tree (2021). arXiv preprint arXiv:2108.13332
Wang, Y., Yang, J., Li, T., Zhu, F., Zhou, X.: Anti-dust: a method for identifying and preventing Blockchain’s dust attacks. In: 2018 International Conference on Information Systems and Computer Aided Education (ICISCAE), pp. 274–280. IEEE, July 2018
Ploder, C., Spiess, T., Bernsteiner, R., Dilger, T., Weichelt, R.: A Risk Analysis on Blockchain Technology Usage for Electronic Health Records. Cloud Computing And Data Science, pp. 1–16 (2021). https://doi.org/10.37256/ccds.222021777
Wright, S.: Technical and legal challenges for healthcare blockchains and smart contracts. In: 2019 ITU Kaleidoscope: ICT for Health: Networks, Standards, and Innovation (ITU K) (2019)
Panda, S.K., Jena, A.K., Swain, S.K., Satapathy, S.C. (Eds.): Blockchain Technology: Applications and Challenges. Springer International Publishing, Cham (2021). https://doi.org/10.1007/978-3-030-69395-4
Griggs, K.N., Ossipova, O., Kohlios, C.P., Baccarini, A.N., Howson, E.A., Hayajneh, T.: Healthcare blockchain system using smart contracts for secure automated remote patient monitoring. J. Med. Syst. 42(7), 1–7 (2018). https://doi.org/10.1007/s10916-018-0982-x
Beinke, J., Fitte, C., Teuteberg, F.: Towards a stakeholder-oriented blockchain-based architecture for electronic health records: design science research study. J. Med. Internet Res. 21(10), e13585 (2019). https://doi.org/10.2196/13585
Wu, Y., Song, P., Wang, F.: Hybrid consensus algorithm optimization: a mathematical method based on POS and PBFT and its application in Blockchain. Math. Probl. Eng. 2020 (2020)
Siyal, A.A., Junejo, A.Z., Zawish, M., Ahmed, K., Khalil, A., Soursou, G.: Applications of blockchain technology in medicine and healthcare: challenges and future perspectives. Cryptography 3(1), 3 (2019)
Castillo, J.: Blockchain: a decentralized solution for secure applications (doctoral dissertation, university of texas at San Antonio) (2022)
Xiong, H., Chen, M., Wu, C., Zhao, Y., Yi, W.: Research on progress of blockchain consensus algorithm: a review on recent progress of blockchain consensus algorithms. Futur. Internet 14(2), 47 (2022). https://doi.org/10.3390/fi14020047
Esmaeilzadeh, P.: Benefits and concerns associated with blockchain-based health information exchange (HIE): a qualitative study from physicians’ perspectives. BMC Med. Inform. Decis. Mak. 22(1), 1–18 (2022)
Gostin, L.O., Levit, L.A., Nass, S.J. (Eds.): Beyond the HIPAA privacy rule: enhancing privacy, improving health through research (2009)
Wachter, S.: Normative challenges of identification in the Internet of Things: privacy, profiling, discrimination, and the GDPR. Comput. Law Secur. Rev. 34(3), 436–449 (2018)
Nguyen, D., Pathirana, P., Ding, M., Seneviratne, A.: Blockchain for secure EHRs sharing of mobile cloud based E-Health systems. IEEE Access 7, 66792–66806 (2019). https://doi.org/10.1109/access.2019.2917555
Min, M., et al.: Learning-based privacy-aware offloading for healthcare IoT with energy harvesting. IEEE Internet Things J. 6(3), 4307–4316 (2019). https://doi.org/10.1109/jiot.2018.2875926
Bernal Bernabe, J., Canovas, J., Hernandez-Ramos, J., Torres Moreno, R., Skarmeta, A.: Privacy-preserving solutions for blockchain: review and challenges. IEEE Access 7, 164908–164940 (2019). https://doi.org/10.1109/access.2019.2950872
Sookhak, M., Jabbarpour, M.R., Safa, N.S., Yu, F.R.: Blockchain and smart contract for access control in healthcare: a survey, issues and challenges, and open issues. J. Netw. Comput. Appl. 178, 102950 (2021)
Lagrama, E.R.C.: Preventing Disaster: Quantifying Risks at the UP Diliman University Library (2009)
DeVore, S., Champion, R.W.: Driving population health through accountable care organizations. Health Aff. 30(1), 41–50 (2011)
Ghafur, S., Grass, E., Jennings, N.R., Darzi, A.: The challenges of cybersecurity in health care: the UK national health service as a case study. Lancet Digit. Health 1(1), e10–e12 (2019)
Rodrigues, B., Stiller, B.: Cooperative signaling of DDoS attacks in a blockchain-based network. In: Proceedings of the ACM SIGCOMM 2019 Conference Posters and Demos, pp. 39–41 (2019)
Zhang, R., Preneel, B.: Publish or perish: a backward-compatible defense against selfish mining in bitcoin. In: Handschuh, H. (ed.) CT-RSA 2017. LNCS, vol. 10159, pp. 277–292. Springer, Cham (2017). https://doi.org/10.1007/978-3-319-52153-4_16
Singh, S., Sanwar Hosen, A.S.M., Yoon, B.: Blockchain security attacks, challenges, and solutions for the future distributed IoT network. IEEE Access 9, 13938–13959 (2021)
Wen, Y., Lu, F., Liu, Y., Huang, X.: Attacks and countermeasures on blockchains: a survey from layering perspective. Comput. Netw. 191, 107978 (2021)
Hsueh, C., Chin, C.: EPoW: solving blockchain problems economically. In: 2017 IEEE SmartWorld, Ubiquitous Intelligence Computing, Advanced Trusted Computed, Scalable Computing Communications, Cloud Big Data Computing, Internet of People and Smart City Innovation, SmartWorld/SCALCOM/UIC/ATC/CBDCom/IOP/SCI, 2017, pp. 1–8 (2017)
Pham, H.L., Tran, T.H., Nakashima, Y.: A secure remote healthcare system for a hospital using blockchain smart contract. In: Proceedings of the IEEE Globecom Workshops, pp. 1–6 (2018)
Hewa, T.M., Hu, Y., Liyanage, M., Kanhare, S.S., Ylianttila, M.: Survey on blockchain-based intelligent contracts: technical aspects and future research. IEEE Access 9, 87643–87662 (2021)
Pinter, K., Schmelz, D., Lamber, R., Strobl, S., Grechenig, T.: Towards a multi-party, blockchain-based identity verification solution to implement clear name laws for online media platforms. In: Business Process Management: Blockchain and Central and Eastern Europe Forum. BPM 2019. LNBIP, vol. 361, pp. 151–165. Springer, Cham (2019). https://doi.org/10.1007/978-3-030-30429-4_11
Dagher, G.G., Mohler, J., Milojkovic, M., Marella, P.B.: Ancile: privacy-preserving framework for access control and interoperability of electronic health records using blockchain technology. Sustain. Cities Soc. 39, 283–297 (2018)
Zaabar, B., Cheikhrouhou, O., Jamil, F., Ammi, M., Abid, M.: HealthBlock: a secure blockchain-based healthcare data management system. Comput. Netw. 200, 108500 (2021)
Papadaki, M., Karamitsos, I., Themistocleous, M.: Covid-19 digital test certificates and Blockchain. J. Enterp. Inf. Manag. 34, 993–1003 (2021). https://www.researchgate.net/publication/353272635_ViewpointCovid-19_digital_test_certificates_and_blockchain
Author information
Authors and Affiliations
Corresponding authors
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2023 The Author(s), under exclusive license to Springer Nature Switzerland AG
About this paper
Cite this paper
Al Barghuthi, N.B., Said, H.E., Badi, S.M., Girija, S. (2023). Security Risk Assessment of Blockchain-Based Patient Health Record Systems. In: Papadaki, M., Rupino da Cunha, P., Themistocleous, M., Christodoulou, K. (eds) Information Systems. EMCIS 2022. Lecture Notes in Business Information Processing, vol 464. Springer, Cham. https://doi.org/10.1007/978-3-031-30694-5_35
Download citation
DOI: https://doi.org/10.1007/978-3-031-30694-5_35
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-031-30693-8
Online ISBN: 978-3-031-30694-5
eBook Packages: Computer ScienceComputer Science (R0)