Medical records


The solution offers patients full control over their medical records, allowing them to manage access by clinics and other parties in real time and reducing costs for medical institutions through the use of a unified interface.

Medical records

To obtain their medical records, a patient needs to send inquiries to all clinics where they have been treated. In doing so, the patient is likely to run into several issues

  • There is no comprehensive list of clinics keeping medical histories
  • To make an inquiry, a patient has to show up in person
  • Geographic distribution of clinics
  • Lack of a business processes for obtaining medical records, and other bureaucratic hurdles

This problem could be resolved by introducing a comprehensive system of medical records on a regional or national level. The issue of managing access rights to a patient’s medical records arises.

Therefore, a patient’s medical records need to be protected with cryptographic algorithms, and only the patient or their authorized representative can manage access rights of other parties, including clinics’ personnel.

Building a distributed ledger for access rights to patients’ medical records

A system for managing repository records over a REST API is integrated with the Waves Enterprise platform’s node. Changes to access rights to a patient’s medical records are written to the blockchain as Data Transactions.


Use of blockchain for managing user permissions

  • For each new medical record, a Data Transaction with meta information (Document Set) is created and encrypted with a public key in the Record Management System.
  • An inquiry from a medical institution for a patient’s records is recorded to the blockchain and encrypted with an open key in the Record Management System.
  • Using a client connected to the permissioned management system, the patient responds to the inquiry.
Business value

A patient receives up-to-date and immutable information on inquiries concerning their data and results of inquiry processing.


The patient’s decision to provide or refuse permissions is recorded to the distributed ledger.