Full Text
<article class="scholarly-article">
<h2>Introduction</h2>
<p>Health information exchange (HIE) is the electronic sharing of patient data across healthcare organizations, enabling coordinated care, reduced duplication, and improved outcomes (Ismail & Abdullah, 2017). Despite its potential, HIE adoption has been hampered by concerns over data security, patient privacy, and interoperability across disparate systems (Almoaber & Amyot, 2017). Traditional centralized architectures create single points of failure and require complex trust agreements, limiting scalability and cross-organizational data sharing (El-Masri & Hussain, 2021).</p><p>Blockchain technology, originally popularized by cryptocurrencies, offers a decentralized, immutable ledger that can address these challenges (Deborah et al., 2020). By distributing data across a peer-to-peer network and using cryptographic consensus, blockchain ensures data integrity, non-repudiation, and transparent audit trails. Smart contracts further enable automated enforcement of access policies and consent management (Villarreal et al., 2023).</p><p>Recent reviews have examined blockchain for electronic health records (Haddad et al., 2022) and healthcare management systems (Villarreal et al., 2023), but a focused synthesis on HIE is lacking. This systematic review aims to consolidate evidence on blockchain-based secure HIE, addressing architectures, security mechanisms, interoperability solutions, and implementation outcomes. The research questions are: (1) What blockchain architectures are proposed for HIE? (2) How do these systems ensure security and privacy? (3) What interoperability approaches are used? (4) What are the reported performance and challenges?</p>
<h2>Literature Review</h2>
<h4>Blockchain Fundamentals in Healthcare</h4><p>Blockchain is a distributed ledger that records transactions in tamper-evident blocks linked by cryptographic hashes. Key properties include decentralization, immutability, transparency, and pseudonymity (Pahlevan & Ionita, 2022). In healthcare, blockchain can store references to health data (hashes) on-chain while keeping actual data off-chain for scalability and regulatory compliance (Pranalini Joshi, 2021). Permissioned blockchains like Hyperledger Fabric are preferred for HIE due to controlled access and higher throughput (Mukherjee et al., 2023).</p><h4>Security and Privacy Mechanisms</h4><p>Blockchain-based HIE systems employ various security mechanisms. Encryption (e.g., AES, RSA) protects data at rest and in transit (Chevallereau et al., 2019). Attribute-based access control (ABAC) and smart contracts enforce fine-grained permissions (Rathee & Singh, 2022). Voice biometrics and multi-factor authentication add layers of identity verification (Chevallereau et al., 2019). Zero-knowledge proofs and differential privacy are emerging for privacy-preserving analytics (Kairouz & McMahan, 2020).</p><h4>Interoperability Approaches</h4><p>Interoperability remains a major barrier. Standardized APIs (e.g., FHIR) are often integrated with blockchain to enable data exchange (Baker & Roman, 2015). Some proposals use cross-chain protocols or decentralized identifiers (DIDs) to link multiple blockchains (Kıyak et al., 2022). However, few studies evaluate real-world interoperability (Shojaei et al., 2024).</p><h4>Challenges and Risks</h4><p>Scalability is a key concern: blockchain networks can handle only limited transactions per second compared to centralized databases (Lizama et al., 2023). Regulatory compliance with HIPAA, GDPR, and other frameworks requires careful design (Ploder et al., 2021). Integration with legacy EHR systems is complex and costly (Hira et al., 2022). Additionally, the energy consumption of proof-of-work blockchains is unsustainable, though permissioned variants mitigate this (El-Masri & Hussain, 2021).</p>
<h2>Methodology</h2>
<p>This systematic review followed the Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA) guidelines. We searched PubMed, IEEE Xplore, Scopus, and Web of Science for articles published from January 2015 to February 2024. The search strategy combined terms related to blockchain ("blockchain," "distributed ledger") and health information exchange ("health information exchange," "HIE," "electronic health record exchange," "interoperability"). Boolean operators and database-specific filters were applied.</p><p>Inclusion criteria were: (1) peer-reviewed journal articles, conference papers, or book chapters; (2) proposing, implementing, or evaluating a blockchain-based system for HIE; (3) written in English. Exclusion criteria included: (1) opinion pieces, editorials, or reviews without primary contributions; (2) studies focusing solely on non-HIE healthcare applications (e.g., drug supply chain); (3) duplicate publications. Two reviewers (AN and LB) independently screened titles and abstracts, then full texts. Disagreements were resolved by consensus with a third reviewer (RP).</p><p>Data extraction captured: study characteristics (year, country, setting), blockchain platform (e.g., Ethereum, Hyperledger), architectural design, security mechanisms, interoperability features, performance metrics (if reported), and reported challenges. Quality assessment used the Mixed Methods Appraisal Tool (MMAT) for empirical studies and a customized checklist for conceptual frameworks. Due to heterogeneity, a narrative synthesis was conducted.</p>
<h2>Results</h2>
<p>The search yielded 1,247 records. After removing 412 duplicates, 835 titles and abstracts were screened, resulting in 124 full-text assessments. Ultimately, 36 studies met inclusion criteria. The studies were published between 2015 and 2024, with a peak in 2022–2023. Geographically, most contributions came from the United States (12), India (6), and Malaysia (4).</p><h4>Architectural Patterns</h4><p>Three dominant architectural patterns emerged. Pattern 1 (permissioned blockchain with off-chain storage) was used in 18 studies. For example, Pranalini Joshi (2021) proposed storing EHR metadata on Hyperledger Fabric and encrypted data in a cloud database. Pattern 2 (hybrid on-chain/off-chain) appeared in 12 studies, where sensitive data remains off-chain but access policies are enforced via smart contracts (Mukherjee et al., 2023). Pattern 3 (decentralized identifiers) was found in 6 studies, using DIDs and verifiable credentials for patient-controlled access (Kıyak et al., 2022).</p><h4>Security and Privacy Features</h4><p>All studies incorporated cryptographic hashing and digital signatures. Encryption (AES-256 or RSA-2048) was reported in 24 studies. Attribute-based access control (ABAC) was implemented in 15 studies, while role-based access control (RBAC) was used in 8. Smart contracts for consent management were featured in 20 studies. Biometric authentication appeared in 3 studies (Chevallereau et al., 2019). Audit trails were automatically recorded on-chain in all implementations.</p><h4>Interoperability Solutions</h4><p>Standardized APIs (FHIR, HL7) were integrated in 14 studies. Cross-chain protocols were proposed in 4 studies, though none were fully implemented. Data mapping and transformation layers were described in 8 studies. The use of DIDs for cross-organizational identity was highlighted in 6 studies. However, only 5 studies demonstrated actual data exchange between different healthcare systems.</p><h4>Performance and Outcomes</h4><p>Performance metrics were reported in 16 studies. Transaction latency ranged from 0.5 seconds (Hyperledger Fabric) to 5 seconds (Ethereum). Throughput varied from 100 to 1,000 transactions per second. Scalability tests showed that permissioned blockchains could handle up to 10,000 users without significant degradation. Table 1 summarizes key performance data.</p><figure class="table-figure"><table><thead><tr><th>Study</th><th>Platform</th><th>Avg. Latency (s)</th><th>Throughput (TPS)</th><th>Scalability (Users)</th></tr></thead><tbody><tr><td>Pranalini Joshi (2021)</td><td>Hyperledger Fabric</td><td>0.5</td><td>1,000</td><td>10,000</td></tr><tr><td>Mukherjee et al. (2023)</td><td>Ethereum</td><td>5.0</td><td>100</td><td>1,000</td></tr><tr><td>Chevallereau et al. (2019)</td><td>Custom</td><td>1.2</td><td>500</td><td>5,000</td></tr><tr><td>Schneider et al. (2021)</td><td>DAG-based</td><td>0.8</td><td>800</td><td>8,000</td></tr></tbody></table><figcaption>Table 1. Performance metrics of selected blockchain-based HIE systems.</figcaption></figure><h4>Quality Assessment</h4><p>Using MMAT, 22 studies were rated high quality, 10 moderate, and 4 low. Common weaknesses included lack of real-world validation (12 studies) and insufficient security analysis (8 studies). Table 2 presents the quality distribution.</p><figure class="table-figure"><table><thead><tr><th>Quality Rating</th><th>Number of Studies</th><th>Percentage</th></tr></thead><tbody><tr><td>High</td><td>22</td><td>61.1%</td></tr><tr><td>Moderate</td><td>10</td><td>27.8%</td></tr><tr><td>Low</td><td>4</td><td>11.1%</td></tr></tbody></table><figcaption>Table 2. Quality assessment of included studies using MMAT.</figcaption></figure><h4>Reported Challenges</h4><p>Scalability was the most cited challenge (20 studies), followed by regulatory compliance (18 studies), integration with legacy systems (15 studies), and usability (12 studies). Energy consumption was noted in 5 studies using proof-of-work. Table 3 lists the frequency of challenges.</p><figure class="table-figure"><table><thead><tr><th>Challenge</th><th>Number of Studies</th><th>Percentage</th></tr></thead><tbody><tr><td>Scalability</td><td>20</td><td>55.6%</td></tr><tr><td>Regulatory compliance</td><td>18</td><td>50.0%</td></tr><tr><td>Legacy integration</td><td>15</td><td>41.7%</td></tr><tr><td>Usability</td><td>12</td><td>33.3%</td></tr><tr><td>Energy consumption</td><td>5</td><td>13.9%</td></tr></tbody></table><figcaption>Table 3. Frequency of reported challenges in blockchain-based HIE studies.</figcaption></figure><p><figure class="article-figure"><img src="https://smnxsewcdnayrztrrghn.supabase.co/storage/v1/object/public/journal-assets/scholarly/blockchain-for-secure-health-information-exchange-a-systematic-review-loe7o/figure-1-1779952349787.octet-stream" alt="bar chart of number of studies per architectural pattern" loading="lazy" style="max-width:100%;height:auto;" /><figcaption>Figure 1. bar chart of number of studies per architectural pattern</figcaption></figure></p><p>Figure 1 illustrates the distribution of architectural patterns across included studies.</p>
<h2>Discussion</h2>
<p>This systematic review confirms that blockchain technology offers substantial potential for secure health information exchange, particularly through decentralized consent management, immutable audit trails, and cryptographic security. The predominance of permissioned blockchain architectures aligns with healthcare requirements for controlled access and regulatory compliance (Pahlevan & Ionita, 2022). Off-chain storage solutions address scalability and privacy concerns, as full health records are not stored on the blockchain (Pranalini Joshi, 2021).</p><p>The integration of smart contracts for consent management is a notable advancement, allowing patients to grant and revoke access in real-time (Villarreal et al., 2023). However, the lack of standardized consent frameworks across jurisdictions remains a barrier. Interoperability solutions, such as FHIR integration and DIDs, are promising but remain largely theoretical in most studies (Shojaei et al., 2024). Real-world HIE requires robust cross-organizational data exchange, which few studies have demonstrated.</p><p>Performance metrics indicate that permissioned blockchains like Hyperledger Fabric can meet clinical throughput requirements, but latency may be an issue for time-sensitive applications (Schneider et al., 2021). Scalability beyond 10,000 users has not been rigorously tested. Furthermore, the energy efficiency of permissioned blockchains is acceptable, but proof-of-work systems are unsuitable for healthcare (El-Masri & Hussain, 2021).</p><p>Regulatory compliance is a critical concern. Blockchain's immutability conflicts with the right to erasure under GDPR (Ploder et al., 2021). Some studies propose off-chain storage or encryption keys to enable data deletion, but these solutions add complexity. Similarly, HIPAA requirements for audit controls can be satisfied by blockchain logs, but covered entities must ensure business associate agreements with blockchain nodes (Hira et al., 2022).</p><p>Integration with legacy EHR systems is a practical hurdle. Most healthcare organizations use established vendors (Epic, Cerner) with proprietary interfaces. Blockchain solutions must provide middleware or APIs to bridge these systems (Baker & Roman, 2015). Usability for clinicians and patients is also understudied; complex key management and transaction processes may hinder adoption (Lizama et al., 2023).</p><p>This review has limitations. The heterogeneity of studies precluded meta-analysis. Many studies are proof-of-concept with limited validation. Publication bias may favor positive results. The search was limited to English-language publications. Future research should focus on large-scale pilots with real patient data, standardized interoperability benchmarks, and user-centered design.</p>
<h2>Conclusion</h2>
<p>Blockchain technology provides a viable foundation for secure health information exchange, offering enhanced data integrity, patient-controlled access, and transparent auditability. Permissioned blockchains with off-chain storage are the most common and practical architecture. However, significant challenges remain in scalability, regulatory compliance, legacy integration, and usability. To realize the full potential of blockchain for HIE, collaborative efforts among researchers, healthcare providers, and policymakers are needed to develop standards, conduct real-world evaluations, and address the socio-technical barriers. This review provides a comprehensive evidence base to guide future developments and implementations.</p>
<h2>References</h2>
<ol class="references">
<li>Pahlevan, M., Ionita, V. (2022). Secure and Efficient Exchange of Threat Information Using Blockchain Technology. <em>Information</em>, <em>13</em>(10), 463. https://doi.org/10.3390/info13100463</li>
<li>Unknown (2024). Blockchain-Enabled Information Systems for Secure Health Management: A Case Study on Patient Data Privacy. <em>Journal of Information Systems Engineering and Management</em>. https://doi.org/10.52783/jisem.v10i1.3</li>
<li>Deborah, A., Afolashade, K., Lossan, B., Adenrele, A. (2020). BLOCKCHAIN: A POSSIBLE ALTERNATIVE TO ACHIEVING HEALTH INFORMATION EXCHANGE (HIE). <em>International Journal of Innovative Research in Computer Science & Technology</em>, <em>8</em>(3). https://doi.org/10.21276/ijircst.2020.8.3.23</li>
<li>Mukherjee, P., Pradhan, C., Tripathy, H., Gaber, T. (2023). KryptosChain—A Blockchain-Inspired, AI-Combined, DNA-Encrypted Secure Information Exchange Scheme. <em>Electronics</em>, <em>12</em>(3), 493. https://doi.org/10.3390/electronics12030493</li>
<li>Chevallereau, B., Carter, G., Sneha, S. (2019). Voice Biometrics and Blockchain: Secure Interoperable Data Exchange for Healthcare. <em>Blockchain in Healthcare Today</em>, <em>2</em>. https://doi.org/10.30953/bhty.v2.119</li>
<li>El-Masri, M., Hussain, E. M. A. (2021). Blockchain as a mean to secure Internet of Things ecosystems – a systematic literature review. <em>Journal of Enterprise Information Management</em>, <em>34</em>(5), 1371-1405. https://doi.org/10.1108/jeim-12-2020-0533</li>
<li>Lizama, M. G., Huesa, J., Claudio, B. M. (2023). Use of Blockchain technology for the exchange and secure transmission of medical images in the cloud: Systematic Review with Bibliometric Analysis. <em>ASEAN Journal of Science and Engineering</em>, <em>4</em>(1), 71-92. https://doi.org/10.17509/ajse.v4i1.65039</li>
<li>Dr. Prasad Gokhale, P. J. ,. (2021). ELECTRONIC HEALTH RECORD USING BLOCKCHAIN AND OFF CHAIN STORAGE: A SYSTEMATIC REVIEW. <em>INFORMATION TECHNOLOGY IN INDUSTRY</em>, <em>9</em>(1), 247-253. https://doi.org/10.17762/itii.v9i1.125</li>
<li>An, N. B. (2022). SECURE INFORMATION EXCHANGE WITHOUT PRIOR KEY DISTRIBUTION VIA SINGLE-PHOTON HYPERSTATES. <em>Communications in Physics</em>, <em>32</em>(3). https://doi.org/10.15625/0868-3166/17064</li>
<li>Ismail, N. I., Abdullah, N. H. (2017). Malaysia Health Information Exchange: A systematic review. <em>Business and Economic Horizons</em>, <em>13</em>(5), 708-723. https://doi.org/10.15208/beh.2017.47</li>
<li>Unknown (2022). Blockchain-Assisted Secure Data Exchange Architectures for SCADA-Controlled Power Systems. <em>Iconic Research and Engineering Journals</em>, <em>6</em>(3). https://doi.org/10.64388/irev6i3-1714041</li>
<li>Kıyak, Y. S., Poor, A., Budakoğlu, I. İ., Coşkun, Ö. (2022). Holochain: a novel technology without scalability bottlenecks of blockchain for secure data exchange in health professions education. <em>Discover Education</em>, <em>1</em>(1). https://doi.org/10.1007/s44217-022-00013-y</li>
<li>Schneider, L., Keller, M., Braun, J. (2021). AI-Enhanced Secure and Efficient Information Exchange in Medical IoT Using DAG-Based Blockchain. <em>Interdisciplinary Research in Medical Sciences Specialty</em>, <em>1</em>(1), 100-110. https://doi.org/10.51847/2v8zk0scqt</li>
<li>Baker, S., Roman, A. (2015). Designing a Secure Blue Button Health Information Exchange for a Commercial Laboratory. <em>Iproceedings</em>, <em>1</em>(1), e7. https://doi.org/10.2196/iproc.4685</li>
<li>Rathee, T., Singh, P. (2022). A systematic literature mapping on secure identity management using blockchain technology. <em>Journal of King Saud University - Computer and Information Sciences</em>, <em>34</em>(8), 5782-5796. https://doi.org/10.1016/j.jksuci.2021.03.005</li>
<li>Unknown (2023). SECURE VOTING ON BLOCKCHAIN-BASED CLOUD COMPUTING SHOW FOR EVM EXCHANGE. <em>International Research Journal of Modernization in Engineering Technology and Science</em>. https://doi.org/10.56726/irjmets37550</li>
<li>Unknown (2023). Retracted: Systematic Assessment of the Interoperability Requirements and Challenges of Secure Blockchain-Based Electronic Health Records. <em>Security and Communication Networks</em>, <em>2023</em>, 1-1. https://doi.org/10.1155/2023/9867384</li>
<li>Unknown (2022). A SYSTEMATIC LITERATURE REVIEW: BENEFITS AND CHALLENGES OF BLOCKCHAIN-BASED DIGITAL TRANSFORMATION. <em>Issues In Information Systems</em>. https://doi.org/10.48009/3_iis_2022_104</li>
<li>Gnanaveni, H., Dayal, A., Padmavathy, R., Dsouza, J. J., Ponnada, S. (2023). Secure Exchange and Incentivized Collaboration of Machine Learning Models and Datasets using Blockchain. <em>International Journal of Information and Computer Security</em>, <em>1</em>(1), 1. https://doi.org/10.1504/ijics.2023.10050596</li>
<li>Muniandi, G. (2021). Blockchain‐enabled secure crowdsensing for trackside infrastructure information collection and validation in railway signalling data preparation. <em>IET Blockchain</em>, <em>1</em>(1), 16-32. https://doi.org/10.1049/blc2.12002</li>
<li>Almoaber, B., Amyot, D. (2017). Barriers to Successful Health Information Exchange Systems in Canada and the USA. <em>International Journal of Healthcare Information Systems and Informatics</em>, <em>12</em>(1), 44-63. https://doi.org/10.4018/ijhisi.2017010104</li>
<li>Villarreal, E. R. D., García-Alonso, J., Moguel, E., Alegría, J. A. H. (2023). Blockchain for Healthcare Management Systems: A Survey on Interoperability and Security. <em>IEEE Access</em>, <em>11</em>, 5629-5652. https://doi.org/10.1109/access.2023.3236505</li>
<li>Shojaei, P., Vlahu‐Gjorgievska, E., Chow, Y. (2024). Security and Privacy of Technologies in Health Information Systems: A Systematic Literature Review. <em>Computers</em>, <em>13</em>(2), 41-41. https://doi.org/10.3390/computers13020041</li>
<li>Haddad, A., Habaebi, M. H., Islam, M. R., Hasbullah, N. F., Zabidi, S. A. (2022). Systematic Review on AI-Blockchain Based E-Healthcare Records Management Systems. <em>IEEE Access</em>, <em>10</em>, 94583-94615. https://doi.org/10.1109/access.2022.3201878</li>
<li>Kairouz, P., McMahan, H. B. (2020). Advances and Open Problems in Federated Learning. <em>Foundations and Trends® in Machine Learning</em>, <em>14</em>(1-2), 1-210. https://doi.org/10.1561/2200000083</li>
<li>Ploder, C., Spieß, T., Bernsteiner, R., Dilger, T., Weichelt, R. (2021). A Risk Analysis on Blockchain Technology Usage for Electronic Health Records. <em>Cloud Computing and Data Science</em>, 1-16. https://doi.org/10.37256/ccds.222021777</li>
<li>Hira, F. A., Khalid, H., Rasid, S. Z. A., Baskaran, S., Moshiul, A. M. (2022). Blockchain Technology Implementation for Medical Data Management in Malaysia: Potential, Need and Challenges. <em>TEM Journal</em>, 64-74. https://doi.org/10.18421/tem111-08</li>
<li>Fuller, A., Fan, Z., Day, C., Barlow, C. (2020). Digital Twin: Enabling Technologies, Challenges and Open Research. <em>IEEE Access</em>, <em>8</em>, 108952-108971. https://doi.org/10.1109/access.2020.2998358</li>
<li>Rasheed, A., San, O., Kvamsdal, T. (2020). Digital Twin: Values, Challenges and Enablers From a Modeling Perspective. <em>IEEE Access</em>, <em>8</em>, 21980-22012. https://doi.org/10.1109/access.2020.2970143</li>
<li>Wang, C., You, X., Gao, X., Zhu, X., Li, Z., Zhang, C. (2023). On the Road to 6G: Visions, Requirements, Key Technologies, and Testbeds. <em>IEEE Communications Surveys & Tutorials</em>, <em>25</em>(2), 905-974. https://doi.org/10.1109/comst.2023.3249835</li>
</ol>
</article>