A Lightweight Blockchain-Assisted Framework for Privacy-Preserving Healthcare Using Hybrid AES–RSA Encryption

In the modern world, a patient's medical history is no longer just a stack of paper in a filing cabinet; it is a vast collection of digital records, from lab results to treatment plans, stored across hospitals and clinics. While this shift to electronic records has made care faster and more connected, it has also created a fragile system where data can be lost, stolen, or altered by a single point of failure. To solve this, researchers have turned to a technology called blockchain, which acts like a shared, unchangeable ledger that many different parties can trust without needing a central boss to manage it. However, simply putting medical data on a blockchain is not enough; the data must remain private so that only the right people can read it, and the system must be fast enough to handle millions of records without slowing down. The challenge lies in balancing strong security with speed, ensuring that a doctor can access a patient's history instantly while knowing for certain that the information has not been tampered with.

Addressing this delicate balance, a team of researchers has developed a new framework designed to make healthcare data sharing both secure and efficient. Their approach combines two distinct methods of locking down information: one that is incredibly fast for encrypting large files and another that is excellent for safely exchanging the keys needed to unlock them. They paired this with a specific structure for organizing data that allows for quick checks without needing to read the entire file. The result is a system that protects patient privacy while keeping the digital infrastructure light enough to run smoothly, even as the amount of medical data grows.

The core of this new system relies on a hybrid encryption method, which works like a two-step security process. First, the researchers use a fast, symmetric encryption technique to scramble the actual medical records. This is efficient enough to handle large documents like full patient histories or imaging reports without causing delays. Second, they use a different, more complex encryption method to securely share the key needed to unscramble those records. This ensures that even if the data is intercepted, it remains unreadable to anyone who does not have the specific digital key authorized by the patient or the healthcare provider. By combining these two techniques, the system achieves a high level of security without the heavy computational cost that usually comes with using complex encryption for everything.

To ensure that the data has not been altered, the researchers integrated a structure known as a Merkle tree into the blockchain. Imagine a large library where, instead of checking every single book on every shelf to see if one has been moved, you only need to check a single master list that summarizes the location of every book. In this system, every medical record is given a unique digital fingerprint, and these fingerprints are arranged in a hierarchy. At the top of this hierarchy sits a single summary value that represents the entire set of records. If even a tiny detail in a single medical record changes, the summary value at the top changes completely. This allows doctors, auditors, or patients to verify the integrity of a specific record by checking a small path of information, rather than downloading and comparing the entire database. This method drastically reduces the time and computing power required to confirm that data is authentic.

The researchers tested their framework by simulating a healthcare environment where they generated thousands of transactions to mimic real-world patient data exchanges. They measured how long it took to create keys, generate proofs of data integrity, and verify that information. In these simulations, the new system proved to be faster and more efficient than previous methods that relied on more complex cryptographic techniques. For instance, the time required to generate the necessary keys dropped from over sixteen seconds to just under twelve seconds. Similarly, the time needed to create a proof that the data was valid decreased from fifty-two seconds to forty-three seconds. The size of the digital keys and proofs also shrank, meaning the system uses less storage space and bandwidth, which is crucial for networks that need to operate quickly.

When comparing the performance of this new approach against other advanced methods, the results showed a consistent advantage in speed and resource usage. The system managed to encrypt and decrypt data significantly faster than other common techniques, with encryption times remaining low even as the size of the patient records increased. In tests involving up to one thousand transactions, the system maintained a low memory footprint and kept the time to generate new blocks of data under half a second. This efficiency suggests that the framework could handle the high volume of data typical in a busy hospital network without causing bottlenecks. The researchers also noted that the system could verify the existence of a specific record without revealing the entire database, preserving patient privacy while still allowing for necessary audits.

Despite these promising results, the study acknowledges that the findings come from a controlled simulation rather than a live hospital environment. The data used was synthetic, created to look like real medical records but not drawn from actual patients, which means the system has not yet been tested against the messy, unstructured data found in real-world clinics. Furthermore, the security model assumes that the participants in the network are honest but curious, rather than actively malicious, and the system has not yet been evaluated against sophisticated attacks or specific government regulations. The researchers also noted that the current design does not account for future threats from quantum computers, which could potentially break the encryption methods used today.

The work represents a significant step toward making blockchain technology practical for everyday healthcare use. By proving that a hybrid encryption scheme combined with a hierarchical verification structure can reduce both time and storage requirements, the researchers have offered a viable path forward for secure medical data sharing. The framework demonstrates that it is possible to build a system that is both highly secure and fast enough for real-time clinical decisions. While further testing in real-world settings is needed to confirm its robustness, the simulation results provide a strong foundation for developing privacy-preserving healthcare systems that can scale to meet the needs of a digital future.