Hyperledger Fabric

In March 2020, the world was devastated by a global pandemic that fundamentally restructured the way we live and do business. Now, a year to date later, we are lucky to be at the point where multiple vaccines have been approved and administered to the public. Alas, vaccinating the global population against COVID-19 has proved to be one of the biggest challenges humanity has ever faced, both with unique distribution and logistical challenges. 

To date, as per March 10th, there have currently been ~93.6 million vaccine doses administered in the US and 23.7 million administered in the UK¹.

At the moment, there are multiple different COVID-19 vaccines that have been authorized and recommended, with others in advanced stages of development. While they have all been developed with the same goal in mind, there are substantial differences between the jabs from their composition and reported effectiveness, to their price and ease of conservation, and distribution obligations. For instance, some vaccines are incredibly time and temperature-sensitive, requiring a life of 5-8 days only with temperatures as low as -75C, whereas others can be maintained stable for 30 days at a temperature between 2C and 8C. Needless to say, the logistics and operations of selling, storing, shipping, and administering each of these vaccines is incredibly time-consuming and overwhelmingly manual, only increasing the burden when one administrator must manage large purchase order quantities of two or more different Covid-19 vaccines.

With particular reference to the distribution of the vaccine, a few challenges must be noted. Namely

• Demand Forecasting – What is the total quantity required for shipment 
• Supply Chain Management – How it should be sent to purchases and distributed once arrived to host countries
• Quality Assurance – How and by whom it should be administered, and with what specific procedure to ensure appropriate provision
• Monitor and Mitigation – How people who have received the vaccine should be monitored, particularly where potential collateral effects may rise 

With these vaccines quickly coming to market, it is no surprise that governments and enterprises around the world are exploring solutions, such as vaccine credentials or digital immunization certificates, that can streamline the rollout of vaccines. Many of these solutions leverage combined emerging technologies such as artificial intelligence, machine learning, Internet of Things, and distributed ledger or blockchain technologies

The Powerful Combination of Internet of Things (IoT) and Distributed Ledger Technologies (DLT)

 The combination of IoT and blockchain, in particular, opens the door for new systems that inherently reduce inefficiencies and increase transparency for all involved parties. Take a supply chain for example: the accessibility and geolocation functionality of IoT, paired with the accounting of blockchain and DLTs has created new systems that foster supply chain accountability and integrity unlike any before seen solutions. The coupling of these technologies allow an asset to be tracked from the moment the raw materials are mined and among every step of the supply chain until it is with the end consumer. Without leveraging various device intercommunication capabilities and a strong audit system such as the one perpetuated by DLT, this would be virtually impossible (without large-scale human intervention).

Everis and NTT Data have developed such a tool that combines IoT and Hyperledger Fabric, allowing users to track any type of virtualized asset such as bulk or trade item products, additives, packaging materials, logistic units, and more, from any device. The solution utilizes Hyperledger Fabric to ensure that corresponding transactions are stored and accounted for when reviewing the movement of the assets. This ensures data security, transparency, and an indisputable audit trail, while allowing for automation (via smart contracts), simplification due to a shared truth (ledger), increased security, and certification capabilities.  

Future Applications of Blockchain/DLT in Covid-19 Vaccinations

As both Covid-19 vaccines and DLT+ IoT technology solutions remain in their infancy, only early implementations have been seen – as such, we can expect to see a variety of future applications that have not yet been pushed to production. This may include implementations to alleviate key pains including negotiations, logistics, and fraud prevention.

• Supply Chain Integrity and Validity of Origin: Analysts project that Covid-19 vaccines will be the highest demand counterfeit drug on the black market for 2021³. Track and trace DLT networks with blockchain-based authenticity certificates could allow purchasers to ensure the origin of the vaccination and track the journey throughout an often global fragmented supply chain. We believe that leveraging IoT and a mature enterprise blockchain such as Hyperledger Fabric would create an accountability and tracking flow to benefit all parties, virtually removing the possibility of receiving fraudulent or counterfeit drugs. In this case, Hyperledger Fabric’s architecture and IoT could benefit the proposed solution as outlined below.

	Hyperledger Fabric(4)	IoT
Flexibility	The programmability of Hyperledger Fabric allows for the flexibility required to digitize complex supply chain operations. For example, trust assumptions for chaincodes are separated from trust assumptions for ordering, ensuring that ordering services can be provided by one set of nodes and tolerate some failure or misbehaviour, depending on the lenience in the business case at hand. It also allows for separate channels per company or shipment, and that endorses may be different for each chaincode, allowing for customization while maintaining privacy and security. In this use case, this is particularly relevant as the system design can be built to ensure end-to-end tracking where any (movement) data is logged or payments are made leaving no room for the entry of malicious actors.	IoT allows for multiple types of devices to communicate with one another achieved thanks to different IoT protocols such as Bluetooth, ZigBee, MQTT or CoAP. This ensures that sensors or equipment, from the time of production through to delivery, can communicate with devices of key stakeholders throughout the entire process, from the time of production through to delivery,  adding a layer of reassurance for all parties. There is no room for counterfeit drugs to enter the value chain if tracking is end-to-end.
Confidentiality	There is a possibility to add confidentiality requirements to chaincodes, so that content and state of transactions can only be updated if requirements are met. This ensures that the strictest of confidentiality is ensured across the supply chain.	Confidentiality is often embedded in the design of IoT systems. In this use case, it would be key to ensure that the security and authentication measures only permit participants who have defined roles in the system which require the logging of data. As such, end purchasers can review the roles of all parties involved throughout the entire production and shipping process.
Consensus	The modular architecture allows for pluggable consensus, which provides an added level of customization. The endorsement policies can include checking the certificate details, roles of the requester, or executing chain code. This allows for originating companies to build a consensus mechanism that suits only their operational process and can remove any possibilities for counterfeit drugs to enter the value chain. It also retains a level of programmability and flexibility, which may be required to build a solution across multi-national vaccine supply chains.	With specific solution design and consented user permissions, there is no room for disruption across IoT devices or networks.

Cargo Storage Space: With temperature and time-sensitive lifecycles, the vaccines must be shipped in specific conditions. By tracking cargo ship storage space and corresponding vaccinations through asset tracking DLT networks, logistical burdens can be minimized. 

Smart Contracts for Negotiations: To date, many governments around the world have found themselves susceptible to private battles with vaccination companies. With high global demand and few verified suppliers, private companies hold essentially all bargaining power. As seen in Canada, Italy, and other countries, this allows the companies to delay sending vaccinations even after payments have been made and force better conditions including import tax payment delays, among other critical legal disputes⁵. By leveraging a smart contract in the negotiation process, any room for intermediation is removed as they will be self-executing with previously agreed upon terms. 

Ultimately, it is clear that there is a strong cause to leverage IoT and DLT technologies to ameliorate the current Covid-19 vaccination system, from logistics to temperature monitoring and negotiations. Though there are currently only a few systems in production, we can assume that the efficiencies brought forth perpetuate more use cases in the future. 

1. https://www.bloomberg.com/graphics/covid-vaccine-tracker-global-distribution/
2. https://developer.ibm.com/patterns/develop-an-iot-asset-tracking-app-using-blockchain/
3. https://www.afro.who.int/news/fighting-fake-immunization-travel-certificates-frontier-technologies
4. https://hyperledger-fabric.readthedocs.io/en/release-1.3/arch-deep-dive.html
5. https://www.ctvnews.ca/health/coronavirus/negotiating-contracts-for-vaccines-in-development-needed-flexibility-anand-1.5218491

Cover image by torstensimon from Pixabay.

The accelerating digitization of the healthcare sector has led to the creation of large volumes of sensitive data stored online. Swiss eHealth strategy promotes the adoption of the electronic patient record to allow registered patients and authorized healthcare professionals to access medical data anytime and anywhere. To achieve this, a reliable, compliant, and privacy-preserving solution is required to support definition, maintenance, and enforcement of fine-grained authorizations (consents). Convergence of distributed ledger technology and intelligent data management approaches provides a unique opportunity to bring trust, transparency, auditability, and optimization of medical data management and other healthcare processes. 

Recent research works and numerous PoC implementations actively demonstrate the value of blockchain technology for connecting health care stakeholders in order to help maintain a complete history of patient’s health care data, ensure traceability of the data exchange and automate claims and reimbursement processing. Transparent and auditable prescription monitoring may help to avoid incompatibility of the prescribed medications and can provide incentives for writing fewer prescriptions for certain medications such as opioids. In the pharmaceutical supply chain, blockchain can bring traceability to the tracking of pharmaceutical goods, from verification of the producer, to the transportation and storage conditions and control over drugs returned to the pharmaceutical company. Applying blockchain technology in biomedical research may facilitate new ways for patients to contribute with their healthcare data while ensuring privacy and security and  may  speed-up participant recruitment and collection of large and integrated heterogeneous data. When building such heterogeneous datasets, ensuring authenticity of the data and their sources is essential in order to make informed unbiased decisions and get valuable insights from the data. 

What are the important aspects and potential hurdles that deserve attention from practitioners when employing blockchain in the healthcare settings? While domain-specific requirements to the system functionality vary depending on the application, desirable properties of a resilient healthcare infrastructure for management of the sensitive data distributed among multiple sources are: data and process interoperability, privacy, security, and compliance. For instance, in the case of connecting healthcare stakeholders to facilitate management of patients’ history, some of the most important requirements are ensuring patients’ rights to access and share their sensitive data but also to erase their personal data. To achieve these, the system must ensure interoperability (i.e., must have the ability to exchange and interpret the data) and must be privacy-preserving (i.e, the patients must be able to have full control over the sharing/access revocation/erasure of their data). 

Data erasure (i.e., the possibility to erase the data) itself is not an “out-of-the box property” of the blockchain technology. It is challenging to comply with the right of data erasure when using immutable ledger. However, different approaches exist to address this issue including off-chain management of sensitive data, privacy-preserving techniques (such as encryption, zero-knowledge proofs (ZKP), secure multi-party computations (MPC), and data pseudonymization and anonymization. If anonymized data are released, a reliable infrastructure is required to support a trustworthy collaborative environment and to verify that the data were not altered. 

The choice of the appropriate approach depends on the underlying blockchain technology, the number of participants in the network and the sensitivity and volume of the data, among others. Moreover, patient control over his identifiable data and his actions (for instance, providing consent or authorizations) has to be efficiently verifiable and compatible with access to the data in an emergency situation such as when the patient is unconscious.

Hyperledger Fabric is a permissioned blockchain technology framework that has been actively employed in the implementations of blockchain-based systems for healthcare data management. To ensure privacy of data subjects, Fabric mainly relies (i) on multiple channels support, which make it possible to limit the access to the data to certain participants of the consortia, and (ii) on private collections where sensitive data can be exchanged peer-to-peer and stored in the private databases, yet accessible from chaincode on authorized peers and hashed to verify authenticity. Storing only hash on-chain is also used to provide verifiability of vast amounts of anonymized data for data-driven research and applications. In this case, contrary to limiting the access to the data, it is of a high importance to set up a reliable multi-cloud environment and collaborative framework – a step forward towards attaining interoperability. 

Blockchain infrastructure offered by Swisscom provides support for multi-cloud environments. Multiple non-endorsing peers provided by Swisscom are now dedicated to support verifiability of public COVID-19 related data, as a part of the multi-party, multi-source verifiable data sharing platform MiPasa. To address the scale of the problem, the types of data, languages, time-zones and jurisdictions,- many vendors joined forces to strengthen and support this blockchain-based shared infrastructure to unlock the potential of the data and deliver integrated, trusted, and verifiable insights across multiple industries around the globe.