BZKP: Blockchain-based zero-knowledge proof model for enhancing healthcare security in Bahrain IoT smart cities and COVID-19 risk mitigation

Abstract

Smart cities achieved digital transformation of patients' health records through the use of new technology in IoT healthcare industry. Such technologies of using IoT and remote patient monitoring systems have become dramatically fundamental to reduce the movement of patients, and hence reducing the risk of spreading Covid-19 infection. The Ministry of Health in the Kingdom of Bahrain strives to achieve digital transformation in the healthcare industry, where the National Health Information System (I-SEHA) was launched to provide higher-quality health services. The system interconnects the public healthcare institutes, allowing access to patient's data from any location without the hassle of moving the files physically. Digitization of medical data of patients and sharing some of the data with other institutions outside the protected networks may lead to major privacy and integrity concerns. This paper introduces Blockchain-based Zero-Knowledge Proof (BZKP) model, which is an IoT-based patient-centric model that fuses a zero-knowledge proof solution to be developed for protecting patient's privacy, and ensures patients prior consent on any access to their data including their health status and account balance. The proposed model is developed to provide a robust and scalable architecture for data sharing, which protects the privacy of sensitive data while maintaining high availability. It also provides strong trust and integrity of data by using the immutability features of the blockchain. BZKP is based on preapproved blockchain access tokens to address challenges of accountability and privacy in Bahrain smart cities. As a result, the model provides a secure and trusted access model between different stakeholders to share patient data while maintaining privacy, trust, and high availability. The zero-knowledge proof can be used with the smart contracts, which provides programmable actions that can be used for automating the prescriptions dispensation process for private pharmacies in a decentralized manner with high confidence. Finally, it recommends enhanced electronic key (eKey) procedures used by eGovernment of the Kingdom of Bahrain to update the smart card which stores the personal keys for protecting patient's privacy and provide better consent.

Zero-Knowledge Proof Application in Ecommerce Payment

“…The proposed payment framework includes three parties, the merchant, the customer, and the blockchain system [15]. This also will involve the ZKP method during the process.…”

Technical and Economic Models for a Global Patient co-Owned Cloud (GPOC)

“…Our approach leverages a modular protocol architecture to serve as a way of unifying emerging technologies from across the globe with the intention of facilitating the development of new tools to support co-ownership. [17][18][19][20][21][22][23][24][25][26][27][28][29][30][31][32] The reason for a modular architecture is that stakeholders; patients, their families, clinicians, organisations, and governments have different regulatory requirements or preferences and can remove or add elements to support their respective needs. Such needs could be modelled as a consensus-based optimisation construct allowing the patient to be at the centre of the conversation with all stakeholder input through their personal health record.…”

A transformative shift toward blockchain‐basedIoTenvironments: Consensus, smart contracts, and future directions

“…In the real world, digitizing and sharing patient medical records or information with organizations beyond secured networks can raise severe privacy and integrity issues. Integration of blockchain with zero knowledge proofs, 116 proposed a model named blockchain‐based zero‐knowledge proof (BZKP) model is a patient‐oriented IoT that merges a zero‐knowledge proof solution to be established for preserving patient privacy and ensuring patients advance consent on any access to their data, account balance and health updates. Their proposed model is designed to provide a scalable and robust architecture for data sharing that safeguards sensitive data while ensuring high availability.…”