HAVEN: A Value Exchange Protocol for Patient-Controlled Health Data

This paper presents HAVEN (Health Asset Value & Exchange Network), an open protocol for patient-controlled health data governance. Health data interoperability standards like FHIR R4 and OMOP CDM have matured rapidly, yet no corresponding governance layer ensures that consent, audit trails, and value attribution travel with the data. Foundation models are being trained on clinical records without patient consent mechanisms in place. HAVEN specifies four composable primitives: (1) a content-addressed Health Asset that structurally requires a consent reference before creation; (2) a Consent Protocol with closed-world semantics, deterministic verification, and immediate revocation; (3) a hash-chained Provenance Record supporting O(log n) Merkle inclusion proofs; and (4) a quality-gated Contribution Model that quantifies patient data value through a tier-weighted formula. The protocol layers over FHIR R4, OMOP CDM 6.0, and SMART on FHIR without introducing new data formats. We prove soundness and completeness of the consent verification algorithm, establish tamper-evidence of the provenance chain under standard cryptographic assumptions (SHA-256, Ed25519), and characterize the computational complexity of all core operations. Storage, encryption, key management, and payment mechanisms are intentionally left to implementers. The protocol specification is released under CC BY 4.0. Formal specifications, TypeSpec definitions, and test vectors are available at https://github.com/Chesterguan/HAVEN.