Sara Ait Bennacer

The Moroccan Ministries of Interior and Health have decided to use a QR code to validate the authenticity of the health passport of vaccinated people through a mobile application. However, this digital health passport may expose citizens' privacy to fraud and violation. To address these issues, this paper proposes a system based on Hyperledger Fabric, highlighting privacy issues. This system is designed with respect to the individual privacy law for digital health passports. In addition, our framework includes an innovative access control mechanism that complies with Moroccan Law 09-08, which is responsible for ensuring that the processing of personal data is legitimate and does not infringe on privacy or fundamental human rights, as well as the CNDP (National Commission for the Protection of Personal Data) guidelines. The integration of the Blockchain is intended to guarantee security and privacy between system stakeholders, protecting the integrity and traceability of vaccination information.

Blockchain has attracted a lot of interest since its publication because to its unique characteristics of immutability, decentralization, smart contract, and consensus mechanism. Today's healthcare systems are facing many issues in the era of digital health transformation and the growth of electronic health records. Blockchain has the potential to provide solutions to a variety of electronic health record (EHR)-related challenges, including data management, security, data sharing and patient privacy. This paper represents a blockchain-based healthcare industry survey; it includes many research publications in high-ranking scientific journals in recent years from 2016 to 2022. We adopt the preferred reporting items for systematic reviews and metaanalyses (PRISMA) approach and aspects. This work is based on five databases: Elsevier, Springer, IEEE Xplore, PubMed, and MDPI. The number of studies included in this study was 56. We found that researchers attempted to use blockchain technology to assist patients and healthcare providers in diagnosis and data processing, as well as including multiple entities. Our study discusses the potential of blockchain technology, its roles and benefits in healthcare, aiming to solve several problems such as data management, data sharing, access control, data security and privacy, which are missed in the conventional healthcare system.

In the context of COVID-19 pandemic, the Moroccan Interior and Health Ministries have proposed to use the health pass with a QR code to identify vaccinated people. Additionally, the government suggested a mobile application to control the health passport authenticity. However, the key problem is the possibility of anyone scanning the QR code and figuring out citizens' private information, causing severe issues about individual privacy. In this work, the main contribution is integrating a private Blockchain-based digital health passport to ensure high protection of sensitive information, security and privacy among all the actors (Government, Ministry of Interior, Ministry of Health, verifiers) that comply with the CNDP (National Commission for the Control of Personal Data Protection) and the Moroccan Law 09-08. In our proposed architectural framework solution, we identify two types of actors: authorized and unauthorized, to limit and control access to the citizens' personal information. Besides, to preserve individuals' privacy, we adopt on-chain and off-chain storage (Interplanetary File Systems IPFS). In our case, smart contracts improve security and privacy in the health passport verification process. Our system implementation describes the proposed solution to grant individual privacy. To verify and validate our approach, we used Remix-IDE and Ethereum Blockchain to build smart contracts.

In the context of COVID-19 pandemic, the Moroccan Interior and Health Ministries have proposed to use the health pass with a QR code to identify vaccinated people. Additionally, the government suggested a mobile application to control the health passport authenticity. However, the key problem is the possibility of anyone scanning the QR code and figuring out citizens' private information, causing severe issues about individual privacy. In this work, the main contribution is integrating a private Blockchain-based digital health passport to ensure high protection of sensitive information, security and privacy among all the actors (Government, Ministry of Interior, Ministry of Health, verifiers) that comply with the CNDP (National Commission for the Control of Personal Data Protection) and the Moroccan Law 09-08. In our proposed architectural framework solution, we identify two types of actors: authorized and unauthorized, to limit and control access to the citizens' personal information. Besides, to preserve individuals' privacy, we adopt on-chain and off-chain storage (Interplanetary File Systems IPFS). In our case, smart contracts improve security and privacy in the health passport verification process. Our system implementation describes the proposed solution to grant individual privacy. To verify and validate our approach, we used Remix-IDE and Ethereum Blockchain to build smart contracts.

The current healthcare systems are facing many issues in terms of data management, data sharing, information security and patient privacy, data immutability, trust, and transparency. In addition, the multiple existing healthcare systems are centralized which complicates the healthcare professionals, patients in managing their data and causes several problems. Blockchain technology as a decentralized peer-to-peer network has the power to digitalize and transform the manner that the data are managed in the healthcare industry, in this regard, is one such domain that might benefit from Blockchain technology in different manners. This paper aims to improve a review of recent works on Blockchain-based healthcare applications.