Ensuring Electronic Health Record (EHR) Privacy using Zero Knowledge Proofs (ZKP) and Secure Encryption Schemes on Blockchain

Abstract

In the haste of EHR digitization, the protection of patient data becomes paramount, casting a spotlight on small healthcare clinics grappling with the threats of an ever more interconnected healthcare sector. That is due to the existing centralized system and traditional password-based authentications which cause a single point of failure. Besides this patient consent for EHR sharing is narrowed to a one-time consent. To overcome these problems, this study suggests a robust solution that makes data sharing utilizing blockchain while achieving privacy using web-based Zero Knowledge Proofs (ZKP) authentication and Homomorphic Encryption (HE). The research also considers securely outsourcing EHRs to research organizations to improve data exchange for research purposes. Along with patient-controlled encryption, consent control, and time-limited data access, it also explores dynamic consent management while complying with healthcare standards. Lastly, this study stream-lines secure data sharing with insurance providers while ensuring patient privacy and defending against insurance fraud.