Distributed Identity for Patients in the Pharmaceutical industry

Transcript

okay cool hi everyone thank you so much for coming to this talk we can now talk about distributed modular identity or decentralized identities and pharma ecosystem but before that let me tell you about me this is me my name is ali ibn satoshi i'm the inventor of usdc classic on ethereum's lightning network everybody knows that i was selected as forbes 10 under 10 i achieved a lot before 10 and i'm a patient of rage quit which is a very serious disease now we all know that this is hogwash which is a nicer term than so but the idea is how this brings me to

my topic how do you know that this is all hogwash you guys see me here you saw i'm much good looking than this guy and you can verify my identity so i'm making some claims and you guys are the verifiers now imagine there's a pandemic which is really hard to imagine these days right you have for example certificate issuers which could be different labs hundreds of labs in different countries issuing these certificates and then you have people who need to verify this which could be police it could be you know event managers and whatnot from different countries as well with different systems

so you can see it can not be the easiest task what if we have one guy in his mom's basement issuing covet certificates as well and they are all valid certificates on blockchain as well how can these poor guys now verify that this certificate comes from an authentic lab or an authentic hospital and what not so how do we verify identity nowadays you'll be surprised how many places they verify the identity by actually making a phone call so you go somewhere show you a certificate and this guy is like okay i cannot scan the sql code or this certificate is in thai on arabic and

people cannot even read it all they have to do they see a number they start calling and that's sadly how do we verify identity in the healthcare ecosystem the other option which is a bit more digital where you can take a picture of your id next to your face and stamp like this and then take the id with your face and then say hello to the camera and now the question is really is this the most digital way we can verify identities if we verify identities by scanning an id from a government we might as well just send scan of notes instead of sending emails why are we sending emails why don't we just write down and send a picture of that right or instead of sending crypto why don't we take pictures of checks and send it

to people of course that's not the best way to handle this and that's why it comes to this point like we are in 2022 and we are still not able to verify identities digitally and these are the questions that we're trying to answer at roche and i would say in almost any pharmaceutical company how can patients interact with our services in a secure manner while keeping their data secure and safe and how can organizations like ross and others verify that these patients are the ones who say they are and how can we mirror this real life verification however in a digital way in a secure way where i can know every single patient they are the patient that

consumed our products and we want to know information about our products how how is our product performing so what are we doing at george maybe a distributed identity so the goal is to have one identity that represents you in the whole healthcare ecosystem however this is not just a simple identity that you can have in a database we're trying to build what we call demi a distributed modular identity this solution will help patients to on their data share the data with the people that they want to share with for the purpose that they decide to share with and for the amount of time that we agree on and potentially even get rewarded for doing

so so before i go a bit deeper in the topic one thing we have to understand is an interaction what is an interaction so it starts like this this is a very high overview about how we're trying to build a distributed modular identity topic we issue credentials for doctors that we trust for hospitals that we work with and for labs that we are collaborating with and then you have the patients coming to these doctors and doing what we call a handshake and this is a handshake is the interaction the first interaction between a physical doctor with a physical patient being there and now once they do the hand check they will co-sign the transaction and then we broadcast that to a public blockchain in

this case it's called the health network which is a public blockchain a fork of symbol if you know symbol however the data itself all the medical records are not on the chain they are an ipfs encrypted so but how does it work so you have the patience they first have to create a demi identity which is simple it's just a wallet just imagine that you have your wallet address and that's your identity then you grant access to the healthcare providers for example when you go to a doctor and he scans your qr code now this doctor is able to upload files on your identity then they give you the diagnosis and they certify you for example now i know

that this patient is a certified hemophilia patient so i don't need to know anything else about them right we upload this data to ipfs and then rush now is able to query the interactions of a specific segment for example i want to know how is my him libra medication affecting hemophilia patients then i can scan only the tags of hemophilia and what do what do i get in return i get just a wallet addresses which does not really re reveal who the patient is after that i can request uh a consent from these patients to share only the outcome data with us which means i don't care about your name sex gender whatever games your age quit all i care about is in the case of

hemophilia how many bleeding events are you having once they grant us access to that we aggregate the data and now we are able to measure real world evidence or we re we gather real-world data from these outcome data here to simplify how this process happens a patient would go to a doctor have a visit the doctor would show a qr code the patient would scan it and now this is the handshake happened and now the doctor is able to upload files on the folder of the patient now to understand how this works it's very simple just like you have a windows machine you have the root folder in your root folder you have your personal identity which is

like all your real name age all kind of things under this root folder you have other folders and this is like the layer one folders for example you have dental folder hemophilia folder cancer folder and every time you go to visit a doctor you are able to give them access to the granular formula that you decide for example for my dentist i will give him access to the dental folder so they can upload their files there and whenever i go visit another dentist i have this data portability aspect i can go and give them access to the exact same folder without having a conversation between all the dentists and then atroch or any other pharmaceutical company we can request

access as we said and they grant us us to zero knowledge data basically where we cannot identify them but we can still get the information that we need for us to measure the outcome of our products and this comes for example from our researchers who would query the data and try to get aggregated information so the question is now why are we doing this why do me first of all it's a compliant data sharing without a third party what you have to understand how do we do this now currently we hire or we we go to a service provider that would hold all the patients data and we would pay these guys to hold this data because personal data is a

liability right and so these guys will give us eventually the data that we need from them without giving us the personal data we are now able to remove this third party and still be compliant with gdpr and all kind of data privacy rules the second one this is very obvious when you use blockchain you have data integrity because you're always hashing the interactions you're hashing the data and putting this on the blockchain so you're able to verify that nothing is changed the data privacy aspect come from the patients owning their data and all the data is encrypted actually the consent is not just a consent on paper it's actually the key to decrypt the data we call this support beyond the pill

because once we have we have the state we have access to the patient's outcome data we're able to communicate with the patients directly and allow them to to get more information about their disease translating reward data to evidence and this is the most important thing the health data ownership why are we using blockchain simply removing third parties which helps us to reduce costs right improve security and the most important one is the ownership of the data quickly some challenges we're having and then we move to questions is the legal problems you have to understand about the data where does it hold for example ipfs node which ipfs is for example pinning the data the location of it

security risk and some ethical ones and that's it let's connect if you guys are interested in this topic here's linkedin and twitter and it's open now for questions if anybody has any questions otherwise you can find me around and just do a quote thanks this one you need a decentralized mic

microphone is not working you can do it offline very nice so the question is is this for roche patients only and are we creating a wallet so the first part of the question not no it's not only for rush we are building this with a collaboration with the health foundation however we hope that more pharmaceutical companies will jump on board because as a patient they don't want to have a rush solution and another novalty solution what not they would like to have one place where they hold their data and they can move between them we don't have our own wallet we're

utilizing the tools that are provided by the public blockchain which called the health thank you and if anybody do we have time for more questions all right so there's questions usability very good question so we're trying to hide the blockchain from the user as a user you don't really care about what technology is going in the background so technically you would have a username and a password however your keys are stored on the phone to restore this we're trying to come up with a backup uh

concept where you give parts of your key key charts to the trusted families members or friends and you're always able to retrieve this key when three out of five of them would be there to sign this transaction and then you can gain access back to your but however this is really the backup topic when it comes to decentralized applications one of the most challenging ones so good question so yeah go ahead i think so uh [Music] it works

so when it comes to gdpr and the right to be forgotten one part you answered yourself if the data is encrypted then it's like if you remove the the private key you're no longer able to decrypt that now in 30 years if we are able to break encryption i don't have an answer to that to be honest when quantum computing comes to the to the mix but i hope by then the data is expired and useless so the data is like we always have to keep the data for 10 years or 15 years after that most of our medical records are no longer valid so the patients either they recovered from the patient journey or they passed away so i don't have an accurate answer to be to be honest we will have to think about

this one it's very good question all right guys thank you so much and see you around thank you you