A Secure Framework for Record Exchange Between Medical Institutions

The Personal Health Record (PHR) is a framework of health information exchange. In the digital age, hospitals and medical institutions are moving to an online platform to store the medical record of patients because physical storage has become quite labor-intensive, expensive and also very inconvenient in terms of maintenance and retrieval while online storage overcomes those obstacles. But there are still numerous privacy concerns as confidential health information may be accessed by unauthorized people. Storage of medical records and other patients related information on third party servers may be vulnerable to breaches as third-party servers usually do not possess a lot of security. To assure the patient's authority over to their PHRs, this method is used, to encrypt the PHRs before storing on a server and that data is linked with the blockchain. In this paper, we propose a model and mechanism for control of data access to Personal Health Records stored on the cloud. To achieve efficient data access control for Personal Health Records, we use AES and SHA algorithm as an approach to encrypt each PHR file. The analysis and results exhibit the security and efficiency of our proposed scheme.