Cryptographic evidence-based cybersecurity for smart healthcare systems

Abstract

The idea of smart healthcare assumes the implementation of integrated platforms based on the Internet of Medical Things to improve the quality of medical processes. An indispensable condition for the development of smart healthcare is ensuring the security of medical data. The article presents a framework for the implementation of cryptographic proof of smart contracts in healthcare systems. The proposed architecture implements secure procedures for processing Electronic Health Records (EHRs) based on an access control array. The cryptographic proof of smart contracts ensures the security of medical data processing and also allows for non-repudiation, enforceability, and accountability of digital agreements made between system actors. We developed an open data exchange format for EHRs stored in the blockchain based on a nested tree structure and the DOM interface. The article presents algorithms for creating, executing and validating smart contracts for processing medical data contained in EHRs. The proposed solutions were subjected to empirical tests and cybersecurity assessment in terms of threat and vulnerability analysis using the risk analysis method. Steps recommended by ENISA and elements of the methodology developed by NIST were used to develop a strategy for minimizing the identified threats and vulnerabilities.