Soulbound Tokens: Enabler for Privacy-Aware and Decentralized Authentication Mechanism in Medical Data Storage

Blockchain Healthc Today. 2024 Aug 31:7. doi: 10.30953/bhty.v7.334. eCollection 2024.

Abstract

Context: The digitalization of the healthcare sector faces significant challenges due to the diverse representation of data and their distribution across various hospitals. Moreover, security is a key concern as healthcare-related data are subject to the legal obligations of General Data Protection Regulation (GDPR) and similar data protection legislation. Standardization efforts like Health Level Seven (HL7) have been implemented to enhance data interoperability. However, authentication still remains a critical issue with significant challenges.

Aim: This research aims to improve and strengthen the authentication process by introducing a novel architecture for decentralized authentication. Additionally, it proposes a new approach to decentralized data management, which is crucial for handling sensitive medical data efficiently.

Methodology: The proposed architecture adopts a user-centric approach, utilizing Self-Sovereign Identity (SSI). It introduced a new non-fungible token (NFT) type called soulbound token (SBT) in the medical context, which will facilitate user authentication across different hospitals, effectively creating a federation of interconnected institutions.

Results: The implementation of the proposed architecture demonstrated a significant reduction in authentication time across multiple hospitals. The use of SBT ensured secure and seamless user authentication, enhancing overall system interoperability and data security. The decentralized approach also mitigated the risks associated with centralized authentication servers.

Conclusion: This study successfully presents a novel decentralized authentication architecture for the healthcare domain, leveraging SSI and SBTs. This approach accelerates the authentication process and enhances data security and interoperability among hospitals. Future research should explore the scalability of this architecture and its application in other sectors requiring stringent data security measures.

Keywords: SBT; SSI; Self-Sovereign Identity; Soulbound Token; authentication; blockchain; healthcare; medical record.

Plain language summary

This research addresses challenges in digital healthcare, particularly in data variety, distribution, and authentication. It introduces a decentralized authentication system using Self-Sovereign Identity and a new type of non-fungible tokens called soulbound tokens. This system links hospitals, reduces authentication times, enhances data security, and improves system interoperability. By decentralizing authentication, it mitigates risks associated with centralized servers. This study results suggest that this innovative approach could benefit healthcare and potentially other industries with stringent data security needs, though further research on scalability and broader applications is recommended.

Grants and funding

Funding his work was partially supported by project SERICS (PE00000014) under the NRRP MUR program funded by the EU—NGEU and by the project “DHEAL—COM- Digital Health Solutions in Community Medicine” under the Innovative Health Ecosystem (PNC)—National Recovery and Resilience Plan (NRRP) program funded by the Italian Ministry of Health.