An On-Chain Data-Minimization Architecture for Auditable Diabetes Data Exchange

• Cauan Coutinho Cefet/RJ
• Viviane M. A. Alves UFF
• Raphael Guerra UFF
• Igor Ribeiro Cefet/RJ
• Bruno Guedes Cefet/RJ
• Carmen Queiroz Cefet/RJ
• Lucas Oliveira Cefet/RJ
• Diego Brandão Cefet/RJ

DOI: https://doi.org/10.5753/webmedia_estendido.2026.33271

Resumo

Diabetes care involves heterogeneous data exchanged across institutions and devices. To support cross-institutional auditability without replicating sensitive content, this paper proposes a conceptual permissioned-blockchain architecture in which encrypted payloads, catalogs, identity mappings, and storage locations remain off-chain, while the ledger stores only opaque identifiers, version-bound randomized commitments, revocable permissions, and restricted audit events. Continuous glucose data are committed in configurable batches. Beyond the design, the paper characterizes what an honest-but-curious validator still infers from registration cadence and pseudonym reuse, leakage that metadata exclusion does not close, and estimates transaction volume under continuous monitoring, quantifying how configurable batching reduces ledger activity while trading transaction volume against verification granularity and registration latency. The contribution is conceptual; no implementation or formal proof is claimed.

Palavras-chave: blockchain, off-chain storage, diabetes data, auditability

Referências

2025. 7. Diabetes technology: standards of care in diabetes—2025. Diabetes Care 48, Supplement_1 (2025), S146–S166.

Ananthi Anandhakrishnan and Sufyan Hussain. 2024. Automating insulin delivery through pump and continuous glucose monitoring connectivity: Maximizing opportunities to improve outcomes. Diabetes, Obesity and Metabolism 26 (2024), 27–46.

Elli Androulaki et al. 2018. Hyperledger Fabric: A Distributed Operating System for Permissioned Blockchains. In Proceedings of the 13th EuroSys Conference. 1–15.

Asaph Azaria et al. 2016. MedRec: Using Blockchain for Medical Data Access and Permission Management. In Proceedings of the 2nd International Conference on Open and Big Data. 25–30.

Brasil. 2018. Lei no 13.709, de 14 de agosto de 2018: Lei Geral de Proteção de Dados Pessoais. Diário Oficial da União.

Ang Chen, Andreas Haeberlen, Wenchao Zhou, and Boon Thau Loo. 2017. One primitive to diagnose them all: Architectural support for internet diagnostics. In Proceedings of the Twelfth European Conference on Computer Systems. 374–388.

American Diabetes Association Professional Practice Committee et al. 2025. 7. Diabetes Technology: Standards of Care in Diabetes—2026. Diabetes Care 49, Suppl 1 (2025), S150.

European Parliament and Council of the European Union. 2016. Regulation (EU) 2016/679 (General Data Protection Regulation). Official Journal of the European Union.

Andrea Margheri et al. 2020. Decentralised Provenance for Healthcare Data. International Journal of Medical Informatics (2020).

Deepak Kumar Mishra and Pawan Singh Mehra. 2025. Diabetic-Chain: A Novel Blockchain Approach for Patient-Centric Diabetic Data Management. The Journal of Supercomputing 81 (2025).

Isabel Román-Martínez et al. 2023. Blockchain-Based Service-Oriented Architecture for Consent Management, Access Control, and Auditing. IEEE Access (2023).

Ahmed M. Tawfik et al. 2025. ACHealthChain Blockchain Framework for Access Control and Privacy Preservation in Healthcare. Scientific Reports 15 (2025), 16696.

Qi Xia et al. 2017. BBDS: Blockchain-Based Data Sharing for Electronic Medical Records in Cloud Environments. Information 8, 2 (2017), 44.

Xiaoying Zheng, Yongxin Zhu, and Xueming Si. 2019. A survey on challenges and progresses in blockchain technologies: A performance and security perspective. Applied Sciences 9, 22 (2019), 4731.

Guy Zyskind et al. 2015. Decentralizing Privacy: Using Blockchain to Protect Personal Data. In Proceedings of the IEEE Security and Privacy Workshops. 180–184.