What question did this study set out to answer?

To present BBAS, a blockchain-based authentication system designed for secure e-health applications.

February 17, 2026Scientific Reports0 citationsOpen Access

BBAS: A blockchain-based authentication system for e-health with multi-factor authentication, access control, and post-quantum security

RLRabia LatifPrince Sultan University BYBello Musa YakubuChulalongkorn University NJNor Shahida Mohd Jamail

Key Points

To present BBAS, a blockchain-based authentication system designed for secure e-health applications.
Developed a multi-factor authentication framework consisting of password hashing, OTP, and biometric verification.
Implemented a hybrid access control model combining RBAC and ABAC.
Utilized post-quantum digital signatures and IPFS for data storage.
Built on a permissioned Ethereum network using solidity smart contracts.
Assessed system performance through 500 authentication iterations.
Achieved an authentication success rate of 98.6% and a latency of 0.05 seconds.
Demonstrated a throughput of 19,000 requests per second and a gas cost of 35,000 gas per request.
Reduced biometric error rates significantly, with a false acceptance rate of 0.5% and a false rejection rate of 1.2%.

Abstract

The rapid digitisation of healthcare services presents challenges in guaranteeing safe, scalable, and privacy-preserving access to sensitive medical information. This article presents BBAS, a blockchain-based authentication system for e-Health. BBAS incorporates a multi-factor authentication (MFA) framework that includes password hashing, one-time passwords (OTP), and biometric verification, with a hybrid access control model that combines role-based access control (RBAC) and attribute-based access control (ABAC). To guarantee enduring security, BBAS utilises post-quantum digital signatures (CRYSTALS-Dilithium) and exploits the InterPlanetary file system (IPFS) for off-chain data storage, assuring tamper-resistance and scalability. We implemented the system using solidity smart contracts on a permissioned Ethereum network and assessed via 500 authentication iterations. Results show BBAS outperforms benchmark models across all critical metrics: authentication success rate (ASR: 98.6%), latency (0.05 s), throughput (19,000 req/s), gas cost (35,000 gas/req), block confirmation time (10 s), and storage overhead (0.03 KB/record). Biometric error rates—false acceptance rate (FAR: 0.5%), false rejection rate (FRR: 1.2%), and equal error rate (EER: 0.85%)—are markedly decreased, therefore improving both security and usability. This research validates BBAS as a reliable, scalable, and quantum-resistant authentication framework for contemporary e-Health systems.

Ask AI

Helpful

Bookmark

View Full Paper