ENHANCING HEALTHCARE DATA SECURITY: A TWO-STEP AUTHENTICATION SCHEME WITH CLOUD TECHNOLOGY AND BLOCKCHAIN
Ussatova O. Makilenov S. Mukaddas A. Amanzholova S. Begimbayeva Y. Ussatov N.
2023Technology Center
Eastern-European Journal of Enterprise Technologies
2023#6Issue 2(126)6 - 16 pp.
In the modern world, medical data leakage has many external and internal threats. Information systems of medical organizations are constantly subject to various types of cyberattacks and unauthorized penetration attempts, which leads to the publication of patient medical data online. Existing authentication schemes using blockchain technologies in medical organization systems ensure the integrity of medical data and secure access to patient data. However, one of the serious reasons for unauthorized access to the healthcare system is the human factor, which manifests itself in a negligent attitude towards account security, noncompliance with the rules and policies of information security, and transferring to third parties personal login details to the information system of a medical organization. This paper proposes a solution to this problem through an improved two-step authentication scheme using cloud technology and blockchain. The combined use of cloud technologies and blockchain is a distinctive feature of the proposed authentication scheme since it provides two levels of protection: 1) two-step authentication, the second stage of which includes biometrics through a mobile application. It prevents unauthorized access to the system by third parties; 2) cloud encryption keys for decrypting medical data, which are also accessed through the users biometrics. The practical part of the paper includes the implementation of biometric login in Python using the OpenCV library. As a result of the practical part, unique fingerprint samples were obtained. The biometric user verification algorithm is designed for a mobile application, which we plan to implement in the future
blockchain technology , fingerprint , medical data security , two-step authentication
Text of the article Перейти на текст статьи
Department of Information systems, Al-Farabi Kazakh National University, al-Farabi ave. 71, Almaty, 050040, Kazakhstan
Doctoral Candidate Departament of IT, Al-Farabi Kazakh National University, al-Farabi ave. 71, Almaty, 050040, Kazakhstan
Candidate of Technical Degree, Department of Cybersecurity International Information Technology University, Manas str. 34/1, Almaty, 050040, Kazakhstan
Department of Cybersecurity, Information Processing and Storage Satbayev University, Satpaev str. 22a, Almaty, 050013, Kazakhstan
Department of Information Security Institute of Information and Computational Technologies, Shevchenko str. 28, Almaty, 050010, Kazakhstan
Department of Information systems
Doctoral Candidate Departament of IT
Candidate of Technical Degree
Department of Cybersecurity
Department of Information Security Institute of Information and Computational Technologies
10 лет помогаем публиковать статьи Международный издатель
Книга Публикация научной статьи Волощук 2026 Book Publication of a scientific article 2026