QuickMedBlock: A framework for enhanced attribute-based access control using blockchain for EHR in cloud

Aarti Punia

doi:10.1007/s12083-025-02063-z

Return

QuickMedBlock: A framework for enhanced attribute-based access control using blockchain for EHR in cloud

2025-07-31

PRE

Aarti Punia

Preeti Gulia

Nasib Singh Gill

Umesh Kumar Lilhore *

DOI：10.1007/s12083-025-02063-z

Original

Original request for help

Save

Abstract

En 中文

As healthcare rapidly digitalizes, cloud computing has emerged as the backbone of modern medical data storage and processing, owing to its scalability, cost-efficiency, and universal accessibility. Despite these advantages, centralized cloud infrastructures inherently suffer from significant drawbacks, particularly in protecting patient privacy, enforcing transparent access control, and preventing unauthorized data manipulation—concerns that are critically amplified in the context of sensitive medical information. Following this, federated learning (FL) has grown as an open approach that enables collaborative model training across hospitals without sharing raw data without affecting the privacy of primary data. However, FL is insufficient for high-assurance environments such as hospitals due to its lack of verifiability, dynamic access control, and reliable audit trials. In response to these gaps, QuickMedBlock, a novel blockchain-based federated learning framework specifically designed for cloud-enabled hospital information systems is proposed. Blockchain smart contracts, Decentralized Identity (DID), and a hybrid Attribute- and Role-Based Access Control (ABAC + RBAC) model are seamlessly integrated in the framework to provide fine-grained, auditable, real-time authorization of healthcare entities. The framework leverages Zero-Knowledge Proofs (ZKP) for privacy-preserving verification, multi-signature authentication for critical actions, and tokens and incentivize meaningful institutional participation. Performance evaluations reveal that QuickMedBlock achieves low latency (< 1300 ms), high throughput (8.9 TPS), and gas-efficient smart contract execution—demonstrating real-world feasibility. It provides better privacy, dynamic policy enforcement, decentralized trust, and regulatory compliance than previous solutions.

Keywords:

Attribute-Based Access Control (ABAC)

Federated Learning

Multi-Signature concept

Privacy

Security

Zero Knowledge Proof