{"id":"https://openalex.org/W4416286391","doi":"https://doi.org/10.1109/jiot.2025.3633504","title":"Privacy-Preserving Fine-Grained EMR Access Control for IoMT: A Hybrid RBAC-Smart Contract Scheme With Attribute-Based Authorization","display_name":"Privacy-Preserving Fine-Grained EMR Access Control for IoMT: A Hybrid RBAC-Smart Contract Scheme With Attribute-Based Authorization","publication_year":2025,"publication_date":"2025-11-17","ids":{"openalex":"https://openalex.org/W4416286391","doi":"https://doi.org/10.1109/jiot.2025.3633504"},"language":null,"primary_location":{"id":"doi:10.1109/jiot.2025.3633504","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2025.3633504","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100441195","display_name":"Hongzhi Li","orcid":"https://orcid.org/0000-0002-5883-3780"},"institutions":[{"id":"https://openalex.org/I4210089621","display_name":"Chizhou University","ror":"https://ror.org/007cx7r28","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210089621"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongzhi Li","raw_affiliation_strings":["School of Big Data and Artificial Intelligence, Chizhou University, Chizhou, China","College of Big Data and Artificial Intelligence, Chizhou University, Chizhou, China"],"raw_orcid":"https://orcid.org/0000-0002-5883-3780","affiliations":[{"raw_affiliation_string":"School of Big Data and Artificial Intelligence, Chizhou University, Chizhou, China","institution_ids":["https://openalex.org/I4210089621"]},{"raw_affiliation_string":"College of Big Data and Artificial Intelligence, Chizhou University, Chizhou, China","institution_ids":["https://openalex.org/I4210089621"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048709524","display_name":"Dun Li","orcid":"https://orcid.org/0000-0002-1986-7144"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dun Li","raw_affiliation_strings":["Department of Industrial Engineering, Tsinghua University, Beijing, China","Department of Industrial Engineering, Tsinghua University, China"],"raw_orcid":"https://orcid.org/0000-0002-1986-7144","affiliations":[{"raw_affiliation_string":"Department of Industrial Engineering, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Department of Industrial Engineering, Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084887481","display_name":"Gang Lv","orcid":"https://orcid.org/0000-0002-4246-5610"},"institutions":[{"id":"https://openalex.org/I4210089621","display_name":"Chizhou University","ror":"https://ror.org/007cx7r28","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210089621"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Gang Lv","raw_affiliation_strings":["School of Big Data and Artificial Intelligence, Chizhou University, Chizhou, China","College of Big Data and Artificial Intelligence, Chizhou University, Chizhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Big Data and Artificial Intelligence, Chizhou University, Chizhou, China","institution_ids":["https://openalex.org/I4210089621"]},{"raw_affiliation_string":"College of Big Data and Artificial Intelligence, Chizhou University, Chizhou, China","institution_ids":["https://openalex.org/I4210089621"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5107205316","display_name":"No\u00ebl Crespi","orcid":"https://orcid.org/0000-0003-2962-192X"},"institutions":[{"id":"https://openalex.org/I4210145102","display_name":"Institut Polytechnique de Paris","ror":"https://ror.org/042tfbd02","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210145102"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Noel Crespi","raw_affiliation_strings":["Telecom SudParis, Institut Polytechnique de Paris, Palaiseau, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Telecom SudParis, Institut Polytechnique de Paris, Palaiseau, France","institution_ids":["https://openalex.org/I4210145102"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076323707","display_name":"Roberto Minerva","orcid":"https://orcid.org/0000-0001-5441-9665"},"institutions":[{"id":"https://openalex.org/I4210145102","display_name":"Institut Polytechnique de Paris","ror":"https://ror.org/042tfbd02","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210145102"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Roberto Minerva","raw_affiliation_strings":["Telecom SudParis, Institut Polytechnique de Paris, Palaiseau, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Telecom SudParis, Institut Polytechnique de Paris, Palaiseau, France","institution_ids":["https://openalex.org/I4210145102"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103240571","display_name":"Wenhao Shao","orcid":"https://orcid.org/0000-0001-6990-5893"},"institutions":[{"id":"https://openalex.org/I150807315","display_name":"Guangxi University","ror":"https://ror.org/02c9qn167","country_code":"CN","type":"education","lineage":["https://openalex.org/I150807315"]},{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenhao Shao","raw_affiliation_strings":["School of Computer, Electronics and Information, Guangxi University, Nanning, Guangxi, China","Department of Computer Science and Technology, National University of Defense Technology, Hunan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer, Electronics and Information, Guangxi University, Nanning, Guangxi, China","institution_ids":["https://openalex.org/I150807315"]},{"raw_affiliation_string":"Department of Computer Science and Technology, National University of Defense Technology, Hunan, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zheqing Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210089621","display_name":"Chizhou University","ror":"https://ror.org/007cx7r28","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210089621"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zheqing Zhang","raw_affiliation_strings":["School of Big Data and Artificial Intelligence, Chizhou University, Chizhou, China","College of Big Data and Artificial Intelligence, Chizhou University, Chizhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Big Data and Artificial Intelligence, Chizhou University, Chizhou, China","institution_ids":["https://openalex.org/I4210089621"]},{"raw_affiliation_string":"College of Big Data and Artificial Intelligence, Chizhou University, Chizhou, China","institution_ids":["https://openalex.org/I4210089621"]}]},{"author_position":"last","author":{"id":null,"display_name":"Qishou Xia","orcid":null},"institutions":[{"id":"https://openalex.org/I4210089621","display_name":"Chizhou University","ror":"https://ror.org/007cx7r28","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210089621"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qishou Xia","raw_affiliation_strings":["School of Big Data and Artificial Intelligence, Chizhou University, Chizhou, China","College of Big Data and Artificial Intelligence, Chizhou University, Chizhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Big Data and Artificial Intelligence, Chizhou University, Chizhou, China","institution_ids":["https://openalex.org/I4210089621"]},{"raw_affiliation_string":"College of Big Data and Artificial Intelligence, Chizhou University, Chizhou, China","institution_ids":["https://openalex.org/I4210089621"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.4495,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.91465554,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"13","issue":"2","first_page":"2970","last_page":"2987"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.3885999917984009,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.3885999917984009,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.27149999141693115,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.1062999963760376,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.8690999746322632},{"id":"https://openalex.org/keywords/computer-access-control","display_name":"Computer access control","score":0.7955999970436096},{"id":"https://openalex.org/keywords/data-access","display_name":"Data access","score":0.6114000082015991},{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"Role-based access control","score":0.524399995803833},{"id":"https://openalex.org/keywords/authorization","display_name":"Authorization","score":0.5138999819755554},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.4871000051498413},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.47769999504089355},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.4440999925136566},{"id":"https://openalex.org/keywords/physical-access","display_name":"Physical access","score":0.44339999556541443},{"id":"https://openalex.org/keywords/discretionary-access-control","display_name":"Discretionary access control","score":0.44209998846054077}],"concepts":[{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.8690999746322632},{"id":"https://openalex.org/C44415380","wikidata":"https://www.wikidata.org/wiki/Q17008721","display_name":"Computer access control","level":3,"score":0.7955999970436096},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.794700026512146},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.6114000082015991},{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.524399995803833},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.5138999819755554},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.4871000051498413},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48030000925064087},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.47769999504089355},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4440999925136566},{"id":"https://openalex.org/C1304207","wikidata":"https://www.wikidata.org/wiki/Q7189582","display_name":"Physical access","level":3,"score":0.44339999556541443},{"id":"https://openalex.org/C48814466","wikidata":"https://www.wikidata.org/wiki/Q1228590","display_name":"Discretionary access control","level":4,"score":0.44209998846054077},{"id":"https://openalex.org/C2779965156","wikidata":"https://www.wikidata.org/wiki/Q5227350","display_name":"Data sharing","level":3,"score":0.43549999594688416},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.40849998593330383},{"id":"https://openalex.org/C2778002324","wikidata":"https://www.wikidata.org/wiki/Q4488810","display_name":"Access management","level":2,"score":0.38530001044273376},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.3736000061035156},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.35749998688697815},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.34610000252723694},{"id":"https://openalex.org/C14982408","wikidata":"https://www.wikidata.org/wiki/Q11006334","display_name":"Network Access Control","level":4,"score":0.3206000030040741},{"id":"https://openalex.org/C3087436","wikidata":"https://www.wikidata.org/wiki/Q1386603","display_name":"Secret sharing","level":3,"score":0.3138999938964844},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.3012000024318695},{"id":"https://openalex.org/C70000936","wikidata":"https://www.wikidata.org/wiki/Q4672467","display_name":"Access method","level":2,"score":0.2996000051498413},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.29899999499320984},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.298799991607666},{"id":"https://openalex.org/C17500928","wikidata":"https://www.wikidata.org/wiki/Q959968","display_name":"Control system","level":2,"score":0.28999999165534973},{"id":"https://openalex.org/C198783460","wikidata":"https://www.wikidata.org/wiki/Q629173","display_name":"Management system","level":2,"score":0.2881999909877777},{"id":"https://openalex.org/C1668388","wikidata":"https://www.wikidata.org/wiki/Q1149776","display_name":"Data management","level":2,"score":0.288100004196167},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.2858000099658966},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.27149999141693115},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.2660999894142151},{"id":"https://openalex.org/C194080101","wikidata":"https://www.wikidata.org/wiki/Q46306","display_name":"Access time","level":2,"score":0.26159998774528503},{"id":"https://openalex.org/C168297262","wikidata":"https://www.wikidata.org/wiki/Q6031182","display_name":"Information protection policy","level":2,"score":0.259799987077713},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.25589999556541443},{"id":"https://openalex.org/C2781462938","wikidata":"https://www.wikidata.org/wiki/Q5062195","display_name":"Centralized database","level":2,"score":0.25209999084472656},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.250900000333786}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/jiot.2025.3633504","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2025.3633504","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3677320551","display_name":null,"funder_award_id":"CZ2022YJRC09","funder_id":"https://openalex.org/F4320322358","funder_display_name":"Kyoto University Education and Research Foundation"},{"id":"https://openalex.org/G8184637174","display_name":"\u57fa\u4e8e\u8054\u76df\u94fe\u7684\u533b\u7597\u6570\u636e\u5171\u4eab\u7cfb\u7edf\u8bbf\u95ee\u63a7\u5236\u5173\u952e\u6280\u672f\u7814\u7a76","funder_award_id":"62072005","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322358","display_name":"Kyoto University Education and Research Foundation","ror":"https://ror.org/02kpeqv85"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W4206331936","https://openalex.org/W4376607588","https://openalex.org/W4386440920","https://openalex.org/W4391047299","https://openalex.org/W4391093111","https://openalex.org/W4391609647","https://openalex.org/W4391847476","https://openalex.org/W4393219219","https://openalex.org/W4393307081","https://openalex.org/W4394994926","https://openalex.org/W4396581601","https://openalex.org/W4396893455","https://openalex.org/W4396941469","https://openalex.org/W4396982461","https://openalex.org/W4399255992","https://openalex.org/W4401198040","https://openalex.org/W4401634023","https://openalex.org/W4402301183","https://openalex.org/W4403826756","https://openalex.org/W4404467359","https://openalex.org/W4406063162","https://openalex.org/W4406119406","https://openalex.org/W4406506918","https://openalex.org/W4406755234","https://openalex.org/W4406771325","https://openalex.org/W4406814575","https://openalex.org/W4408280532","https://openalex.org/W4411054997","https://openalex.org/W4411507178","https://openalex.org/W4412747874","https://openalex.org/W4412784392","https://openalex.org/W4412846246"],"related_works":[],"abstract_inverted_index":{"The":[0,106,152],"widespread":[1],"application":[2],"of":[3,11,116,126,138,145,164],"medical":[4,14,23,39,167],"information":[5],"systems":[6],"has":[7,170],"promoted":[8],"the":[9,135,150],"growth":[10],"personal":[12,165],"electronic":[13,166],"records":[15,168],"(EMRs),":[16],"which":[17],"are":[18],"typically":[19],"produced":[20],"in":[21,27],"different":[22],"institutions":[24],"and":[25,66,91,141,169],"stored":[26],"data":[28,31,74,95,103,110,117,127],"centers.":[29],"Consequently,":[30],"owners":[32,111],"no":[33],"longer":[34],"retain":[35],"control":[36,46,59,69,85,129,163],"over":[37],"their":[38,49],"data,":[40],"nor":[41],"can":[42,159],"they":[43],"establish":[44],"access":[45,58,68,75,84,96,104,118,128,162],"rules":[47],"for":[48],"EMRs.":[50],"Therefore,":[51],"this":[52,78,139,157],"study":[53],"designs":[54],"a":[55,82,93,114,143],"patient-centered":[56,102],"EMR":[57,177],"system":[60,108,158],"that":[61,156],"integrates":[62],"decentralized":[63,124],"smart":[64,121],"contracts":[65],"role-based":[67,83],"(RBAC)":[70],"to":[71,87,100,112,148,174],"provide":[72],"fine-grained":[73],"control.":[76,105],"In":[77,131],"system,":[79],"we":[80,133],"integrate":[81],"model":[86],"achieve":[88,101,161],"user-permission":[89],"definition":[90,98],"adopt":[92],"personalized":[94],"policy":[97],"mechanism":[99],"proposed":[107],"allows":[109],"define":[113],"series":[115,144],"policies":[119],"through":[120],"contracts,":[122],"achieving":[123],"management":[125],"permissions.":[130],"addition,":[132],"analyze":[134],"security":[136],"features":[137],"scheme":[140],"design":[142],"comparative":[146],"experiments":[147],"evaluate":[149],"performance.":[151],"experimental":[153],"results":[154],"show":[155],"efficiently":[160],"higher":[171],"reliability":[172],"compared":[173],"traditional":[175],"cloud-based":[176],"sharing":[178],"systems.":[179]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-17T09:13:05.818461","created_date":"2025-11-17T00:00:00"}
