Abstract: In the existing cloud environment, the special requirements of patients to make full control of his/her electronic health record can hardly be fulfilled. In order to solve this problem, a secure access scheme HyperEHR based on Hyperledger fabric and interplanetary file system (IPFS) is proposed. In the proposal, the medical record requester first needs to obtain the consent of his/her organization, and the patient have the final right to make the decision of accessing permission. To ensure the security of cross-organization medical data access, information like medical record generation, update and access is stored in collaborative blockchain. Moreover, specific medical record information and access control policies generated by hospitals and clinics are encrypted and stored in the cloud interplanetary file system. System implementation and analysis show that the scheme has good scalability, interoperability and security. HyperEHR can not only help patient to make control of his/her medical data accessing, but also prevent the privacy disclosure of electronic health record effectively.

Key words: patient controlled, electronic health record, consortium blockchain, security access, interplanetary file system (IPFS)