Access Control Design Based on User Role Type in Telemedicine System Using Ethereum Blockchain

To fulfill health as basic human needs, health care services technology is always improved but also must maintain security and privacy of the data due to huge amount of data is created and distributed. Telemedicine with telecommunication technology offers convenience and cheaper cost, but still is vulnerable to cyber attacks, making it a threat for patients' data's privacy. One approach that can be used to secure the data is applying access control to the data. Immutable blockchain can helps to enforce access control so it cannot be violated. We propose a system which implements Ethereum for the blockchain and React web application for the interface of the system. Data management and the access control are provided through Ethereum smart contracts, and the access control requires different role-based permission to upload and access the patients' data. The system works successfully with average time taken to verify the role is 1.8033 seconds per session. The privacy of the patients' data is ensured because only the patients that are allowed to keep the ID of their own data.