Generating design knowledge for blockchain-based access control to personal health records

  • PDF / 2,064,274 Bytes
  • 29 Pages / 439.37 x 666.142 pts Page_size
  • 93 Downloads / 188 Views

DOWNLOAD

REPORT


Generating design knowledge for blockchain‑based access control to personal health records Pascal Meier1 · Jan Heinrich Beinke1 · Christian Fitte1 · Jan Schulte to Brinke1 · Frank Teuteberg1 Received: 3 February 2020 / Revised: 15 July 2020 / Accepted: 9 August 2020 © The Author(s) 2020

Abstract In the course of digitization in healthcare, personal health records (PHRs) are handled as a key solution. Despite the indisputable benefits, the adoption of PHRs is hampered by data security and data privacy concerns. Blockchain technology offers promising potential to address these issues by enabling secure transactions of sensitive data. With regards to PHRs, the blockchain can be used to manage the access to health-related data. Besides existing generic PHR architectures, we systematically identified issues for the healthcare sector that need to be considered for the development of a PHR. We subsequently derived eight meta-requirements that were consolidated into three design principles. Within a 1-year design science research project, we developed the blockchain-secured PHR prototype, OSHealthRec, and evaluated the system in four evaluation cycles. The findings of our research are twofold. On the one hand, we contribute to the design knowledge base by presenting three design principles. On the other hand, we present the development of a real, operational blockchain-secured PHR and the findings from its continuous evaluation, which may serve as useful advice for further solutions. Keywords  Blockchain · Personal health record · eHealth · Design science research

* Jan Heinrich Beinke jan.beinke@uni‑osnabrueck.de Pascal Meier pascal.meier@uni‑osnabrueck.de Christian Fitte christian.fitte@uni‑osnabrueck.de Jan Schulte to Brinke jschultetobr@uni‑osnabrueck.de Frank Teuteberg frank.teuteberg@uni‑osnabrueck.de 1



Department of Accounting and Information Systems, University of Osnabrück, Katharinenstraße 1, 49069 Osnabrück, Germany

13

Vol.:(0123456789)



P. Meier et al.

1 Introduction While various industries benefit from the opportunities offered by digitization, the healthcare sector continues to face challenges in implementing these in a targeted and broadly supported manner. This is particularly important in the exchange of patients’ data, as many healthcare stakeholders rely on accurate information about previous treatments to provide the best possible care (Poston et al. 2006). Information Systems can enable fast and accurate communication, which modernizes today’s healthcare processes where medical reports are primarily sent by post and coordination usually takes place by telephone or fax (Foronda et  al. 2016). Personal health records (PHRs) have the potential to substantially improve communication in healthcare such that authorized stakeholders have immediate access to patient health data in real time (White and Danis 2013). This would significantly reduce misunderstandings, redundant examinations, adverse drug events and delays in treatment (Chao et al. 2013). In addition, the transparent access to personal