Policy-Bound, Verifier-Pluggable Smart Contract Framework for Auditable Healthcare Analytics

IF 4.2 3区计算机科学 Q2 COMPUTER SCIENCE, INFORMATION SYSTEMS

IEEE Access Pub Date : 2026-02-23 DOI:10.1109/ACCESS.2026.3665093

Muhammad Saeed Javed;Ali Hennache;Muhammad Imran;Saddam Hussain Abbasi

{"title":"Policy-Bound, Verifier-Pluggable Smart Contract Framework for Auditable Healthcare Analytics","authors":"Muhammad Saeed Javed;Ali Hennache;Muhammad Imran;Saddam Hussain Abbasi","doi":"10.1109/ACCESS.2026.3665093","DOIUrl":null,"url":null,"abstract":"Healthcare analytics involving sensitive patient data demand robust statistical safeguards alongside verifiable compliance mechanisms that allow regulators to independently reconstruct query operations, applied policies, and reported outcomes without accessing raw medical information. We present a governance-first, upgradeable on-chain framework that anchors complete request lifecycles to public blockchain using <monospace>keccak256</monospace> cryptographic commitments. This approach delineates a process wherein researchers submit structured queries, a controller captures active policy states, and hospitals provide result digests. A comprehensive and immutable event trail for this entire process is maintained on the Ethereum Sepolia blockchain. External auditors can then reconstruct complete timelines and verify consistent binding between requests, policies, and outcomes. The proposed modular verifier interface, currently implemented via configurable MockVerifier, maintains stable Application Binary Interface compatibility for future production verifier integration while validating end-to-end governance. We demonstrate the framework’s practicality through a detailed diabetes prevalence analytics case study. We provide detailed gas consumption profiles, request latency measurements, and observable failure modes that demonstrate how governance rules translate into enforceable reversions. The architecture maintains minimal on-chain state with Layer-2 readiness, offering immediate regulatory accountability while preserving straightforward upgrade paths to advanced cryptographic components like zk verifiers (Groth16), verifiable differential privacy through VRF-seeded randomness, content-addressed artifact storage, and versioned policy management. This approach effectively separates initial deployment feasibility from computationally intensive cryptography while delivering immediately actionable, externally verifiable evidence of policy compliance.","PeriodicalId":13079,"journal":{"name":"IEEE Access","volume":"14 ","pages":"29590-29609"},"PeriodicalIF":4.2000,"publicationDate":"2026-02-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=11407969","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"IEEE Access","FirstCategoryId":"94","ListUrlMain":"https://ieeexplore.ieee.org/document/11407969/","RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q2","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}

引用次数: 0

Abstract

Healthcare analytics involving sensitive patient data demand robust statistical safeguards alongside verifiable compliance mechanisms that allow regulators to independently reconstruct query operations, applied policies, and reported outcomes without accessing raw medical information. We present a governance-first, upgradeable on-chain framework that anchors complete request lifecycles to public blockchain using keccak256 cryptographic commitments. This approach delineates a process wherein researchers submit structured queries, a controller captures active policy states, and hospitals provide result digests. A comprehensive and immutable event trail for this entire process is maintained on the Ethereum Sepolia blockchain. External auditors can then reconstruct complete timelines and verify consistent binding between requests, policies, and outcomes. The proposed modular verifier interface, currently implemented via configurable MockVerifier, maintains stable Application Binary Interface compatibility for future production verifier integration while validating end-to-end governance. We demonstrate the framework’s practicality through a detailed diabetes prevalence analytics case study. We provide detailed gas consumption profiles, request latency measurements, and observable failure modes that demonstrate how governance rules translate into enforceable reversions. The architecture maintains minimal on-chain state with Layer-2 readiness, offering immediate regulatory accountability while preserving straightforward upgrade paths to advanced cryptographic components like zk verifiers (Groth16), verifiable differential privacy through VRF-seeded randomness, content-addressed artifact storage, and versioned policy management. This approach effectively separates initial deployment feasibility from computationally intensive cryptography while delivering immediately actionable, externally verifiable evidence of policy compliance.

查看原文本刊更多论文

用于可审计医疗保健分析的策略绑定、验证器可插入的智能合约框架

涉及敏感患者数据的医疗保健分析需要强大的统计保护措施以及可验证的遵从性机制，这些机制允许监管机构在不访问原始医疗信息的情况下独立地重建查询操作、应用策略和报告结果。我们提出了一个治理优先的、可升级的链上框架，该框架使用keccak256加密承诺将完整的请求生命周期锚定到公共区块链。这种方法描述了一个过程，其中研究人员提交结构化查询，控制器捕获活动策略状态，医院提供结果摘要。在以太坊Sepolia区块链上维护了整个过程的全面且不可变的事件跟踪。然后，外部审计员可以重建完整的时间表，并验证请求、策略和结果之间的一致绑定。提议的模块化验证器接口，目前通过可配置的MockVerifier实现，在验证端到端治理的同时，为未来的产品验证器集成维护稳定的应用程序二进制接口兼容性。我们通过一个详细的糖尿病流行分析案例研究来证明该框架的实用性。我们提供了详细的气体消耗概况、请求延迟测量和可观察的故障模式，以演示治理规则如何转化为可执行的逆转。该架构通过第2层准备保持最小的链上状态，提供即时的监管责任，同时保留直接升级到高级加密组件的路径，如zk验证器（Groth16），通过vrf种子随机性验证的差异隐私，内容寻址的工件存储和版本化策略管理。这种方法有效地将初始部署可行性与计算密集型密码学分离开来，同时提供立即可操作的、外部可验证的策略遵从性证据。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文求助全文

来源期刊

IEEE Access COMPUTER SCIENCE, INFORMATION SYSTEMSENGIN-ENGINEERING, ELECTRICAL & ELECTRONIC

CiteScore

9.80

自引率

7.70%

发文量

6673

审稿时长

6 weeks

期刊介绍： IEEE Access® is a multidisciplinary, open access (OA), applications-oriented, all-electronic archival journal that continuously presents the results of original research or development across all of IEEE''s fields of interest. IEEE Access will publish articles that are of high interest to readers, original, technically correct, and clearly presented. Supported by author publication charges (APC), its hallmarks are a rapid peer review and publication process with open access to all readers. Unlike IEEE''s traditional Transactions or Journals, reviews are "binary", in that reviewers will either Accept or Reject an article in the form it is submitted in order to achieve rapid turnaround. Especially encouraged are submissions on: Multidisciplinary topics, or applications-oriented articles and negative results that do not fit within the scope of IEEE''s traditional journals. Practical articles discussing new experiments or measurement techniques, interesting solutions to engineering. Development of new or improved fabrication or manufacturing techniques. Reviews or survey articles of new or evolving fields oriented to assist others in understanding the new area.