0

Let's say A has some private medical records of patients and B is a pharmaceutical company who wants to view medical records from A to find out the effect of a particular drug on the patients (run a drug evaluation logic to get performance statistics of a particular drug). A wants to share the private data to B but wants to prevent B to forward (leak) the data to other third party organizations. How can this problem be solved with blockchain?

  • 1
    I would tend to say, that a blockchain is a record keeping system, and not a „forwarding prevention“ system. One B sees data in any blockchain, they can do screenshots and forward to other third party... – pebwindkraft Mar 3 '18 at 23:55
  • B only needs the data to run his evaluation logic, thus can B's logic be included in a smart contract where the read permission of the data can be given to the evaluation logic function? By this way, B can only see the output of the evaluation logic without getting exposure of the data. Is this possible? – Rajrup Ghosh Mar 4 '18 at 21:06
  • I think it is still not a blockchain specific topic. A blockchain holds publicly readable data. And you want to anonimize/hide it somehow, after it is published. I don't know how to do this. I'd be working at this when I input the data. E.g. when bringing the names on the blockchain, hash them, and the rest can just "go". The private key would then be required to show the real data. Maybe the idea of multisig could be used? Or MimbleWimble/CoinJoin? (which are essentially smart contracts). – pebwindkraft Mar 4 '18 at 21:57
  • Lets say its a permissioned blockchain like hyperledger where you can give permissions to who can view the data. One idea is given in page 4 of this paper enigma.co/ZNP15.pdf which deals with the same kind of problem, but I don't know how to implement the idea in smart contract. – Rajrup Ghosh Mar 5 '18 at 6:56
1

Nothing can prevent B from exposing or forwarding the data once he has access to it.

  • B only needs the data to run his evaluation logic, thus can B's logic be included in a smart contract where the read permission of the data can be given to the evaluation logic function? By this way, B can only see the output of the evaluation logic without getting exposure of the data. Is this possible? – Rajrup Ghosh Mar 5 '18 at 6:57
  • @RajrupGhosh Okay, that sounds more doable but that is outside the scope of 'B is a pharmaceutical company who wants to view medical records from A'. In fact, A can run the logic for B as part of a smart contract where only the results are returned. – Willtech Mar 5 '18 at 9:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.